CVE-2011-4339: Low severity suse ipmitool vulnerability
ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4339?
CVE-2011-4339 is categorized as a medium severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2011-4339?
To fix CVE-2011-4339, change the permissions of the ipmievd.pid file to restrict access, typically to 0644.
Which versions of ipmitool are affected by CVE-2011-4339?
CVE-2011-4339 affects ipmitool version 1.8.11.
Can local users exploit CVE-2011-4339?
Yes, local users can exploit CVE-2011-4339 to kill arbitrary processes due to the insecure file permissions.
Is CVE-2011-4339 present in Red Hat Enterprise Linux 6?
Yes, CVE-2011-4339 is present in Red Hat Enterprise Linux 6, specifically related to the ipmitool package.