CVE-2013-4011: High severity IBM AIX vulnerability

Published Jul 18, 2013

Updated

Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to gain privileges via vectors involving (1) arp.ib or (2) ibstat.

Affected Software

3 affected components

IBM AIX=6.1

IBM AIX=7.1

IBM VIOS=2.2.2.2-fp-26_sp-02

Event History

Jul 18, 2013

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-4011?

CVE-2013-4011 is considered a high severity vulnerability due to its potential to allow local users to gain elevated privileges.

How do I fix CVE-2013-4011?

To fix CVE-2013-4011, apply the latest security patches provided by IBM for AIX 6.1, AIX 7.1, and VIOS 2.2.2.2-FP-26 SP-02.

Who is affected by CVE-2013-4011?

CVE-2013-4011 affects local users on IBM AIX versions 6.1 and 7.1, as well as VIOS 2.2.2.2-FP-26 SP-02.

What are the vectors involved in CVE-2013-4011?

The vectors involved in CVE-2013-4011 include arp.ib and ibstat within the InfiniBand subsystem.

Is CVE-2013-4011 a local or remote vulnerability?

CVE-2013-4011 is classified as a local vulnerability, allowing exploitation by users with local access to the affected systems.