Fluid Attacks Database

Description

ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ib_acm daemon log or ibacm.port file.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel6	libmlx4	<0:1.0.4-1.el6	0:1.0.4-1.el6
rpm rhel6	ibacm	<0:1.0.8-0.git7a3adb7.el6	0:1.0.8-0.git7a3adb7.el6
rpm rhel6	ibsim	<0:0.5-7.el6	0:0.5-7.el6
rpm rhel6	ibutils	<0:1.5.7-7.el6	0:1.5.7-7.el6
rpm rhel6	infiniband-diags	<0:1.5.12-5.el6	0:1.5.12-5.el6
rpm rhel6	infinipath-psm	<0:3.0.1-115.1015_open.1.el6	0:3.0.1-115.1015_open.1.el6
rpm rhel6	libibmad	<0:1.3.9-1.el6	0:1.3.9-1.el6
rpm rhel6	libibumad	<0:1.3.8-1.el6	0:1.3.8-1.el6
rpm rhel6	libibverbs	<0:1.1.6-5.el6	0:1.1.6-5.el6
rpm rhel6	librdmacm	<0:1.0.17-0.git4b5c1aa.el6	0:1.0.17-0.git4b5c1aa.el6

1-10 of 12

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.