CVE-2013-2561: Medium severity red hat enterprise linux vulnerability
It was reported [1] that ibutils 1.5.7 suffered from a flaw due to improper handling of files in the /tmp directory. This makes ibutils vulnerable to symlink attacks, which could be used to overwrite arbitrary files on the system.
[1] http://seclists.org/fulldisclosure/2013/Mar/87
Other sources
OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagnet.db, (2) ibdiagnet.fdbs, (3) ibdiagnetibis.log, (4) ibdiagnet.log, (5) ibdiagnet.lst, (6) ibdiagnet.mcfdbs, (7) ibdiagnet.pkey, (8) ibdiagnet.psl, (9) ibdiagnet.slvl, or (10) ibdiagnet.sm in /tmp/.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2561?
CVE-2013-2561 is rated as a medium severity vulnerability due to its potential for file overwriting through symlink attacks.
How do I fix CVE-2013-2561?
To fix CVE-2013-2561, you should upgrade ibutils to version 1.5.8 or later and ensure proper file handling in the /tmp directory.
What are the possible impacts of CVE-2013-2561?
The impact of CVE-2013-2561 includes the potential overwriting of arbitrary files, which can lead to system compromise.
Which software versions are affected by CVE-2013-2561?
CVE-2013-2561 affects ibutils version 1.5.7 and Red Hat Enterprise Linux 6.0.
Is CVE-2013-2561 a local or remote vulnerability?
CVE-2013-2561 is a local vulnerability that requires access to the filesystem to exploit.