CVE-2008-3277

MEDIUM 4.4CVE-2008-3277 · Published 15/04/2014 · updated 16/06/2026

In short

CVE-2008-3277 is a MEDIUM (CVSS 4.4) vulnerability affecting ibutils (openfabrics).
Chance of exploitation in the next 30 days (EPSS): 0.44%, higher than 38.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ibutils openfabrics	`= 1.2-11.2= 1.5.7-2`	No fix yet

Description

Untrusted search path vulnerability in a certain Red Hat build script for the ibmssh executable in ibutils packages before ibutils-1.5.7-2.el6 in Red Hat Enterprise Linux (RHEL) 6 and ibutils-1.2-11.2.el5 in Red Hat Enterprise Linux (RHEL) 5 allows local users to gain privileges via a Trojan Horse program in refix/lib/, related to an incorrect RPATH setting in the ELF header.

References

rhn.redhat.com/errata/RHSA-2012-0311.html · Vendor Advisory
bugzilla.redhat.com/show_bug.cgi · Vendor Advisory

More vulnerabilities in ibutils

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free