CVE-2012-2188
First published: Mon Aug 06 2012(Updated: )
IBM Power Hardware Management Console (HMC) 7R3.5.0 before SP4, 7R7.1.0 and 7R7.2.0 before 7R7.2.0 SP3, and 7R7.3.0 before SP2, and Systems Director Management Console (SDMC) 6R7.3.0 before SP2, does not properly restrict the VIOS viosrvcmd command, which allows local users to gain privileges via vectors involving a (1) $ (dollar sign) or (2) & (ampersand) character.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Power Hardware Management Console Firmware | =7r3.5.0 | |
| IBM Power Hardware Management Console Firmware | =7r7.1.0 | |
| IBM Power Hardware Management Console Firmware | =7r7.2.0 | |
| IBM Power Hardware Management Console Firmware | =7r7.3.0 | |
| IBM Systems Director Management Console firmware | =6r7.3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_power_hmc_viosrvcmd_command_allows_elevated_privilege_on_vios_cve_2012_218825
- http://www.ibm.com/support/docview.wss?uid=isg1MB03548
- http://www.ibm.com/support/docview.wss?uid=isg1MB03550
- http://www.ibm.com/support/docview.wss?uid=isg1MB03554
- http://www.ibm.com/support/docview.wss?uid=isg1MB03580
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75906
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm power hardware management console firmware
- version/ibm power hardware management console firmware/7r3.5.0
- version/ibm power hardware management console firmware/7r7.1.0
- version/ibm power hardware management console firmware/7r7.2.0
- version/ibm power hardware management console firmware/7r7.3.0
- canonical/ibm systems director management console firmware
- version/ibm systems director management console firmware/6r7.3.0