Unscored severity · published Dec 15, 2011
CVE-2011-4339
ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses…
–
CVSS
0.4%
EPSS
No
On KEV
Description
ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 37% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
Ipmitool · Ipmitool Project
1.8.11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4339
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4339
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071575.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071580.html
Mailing List
http://openwall.com/lists/oss-security/2011/12/13/1
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0123.html
Broken Link
http://secunia.com/advisories/47173
Broken Link
http://secunia.com/advisories/47228
More from Ipmitool
8.8
CVE-2020-5208
It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and…