Unscored CVE-2010-1693 EUVD-2010-1713GHSA-gh8x-xc3f-f8gm

openibd in OpenFabrics Enterprise Distribution (OFED) 1.5.2 allows local users to overwrite arbitrary files via a symlink attack on the /tm…

Published Oct 26, 2010 · Updated Aug 7, 2024 · Assigned by sgi

Description

openibd in OpenFabrics Enterprise Distribution (OFED) 1.5.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ib_set_node_desc.sh temporary file.

References

[oss-security] 20101022 CVE-2010-1693: OFED openibd startup script uses predictable tmpfile mailing-list
44332 vdb-entry
ofed-openibd-symlink(62753) vdb-entry
41937 third-party-advisory
68856 vdb-entry
[ewg] 20101021 [PATCH] security fix in openibd script mailing-list