CVE-2008-3277

Published: Apr 15, 2014Modified: May 6, 2026

4.4

Vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 3.4 / Impact: 6.4

Source: NVD

Description

Untrusted search path vulnerability in a certain Red Hat build script for the ibmssh executable in ibutils packages before ibutils-1.5.7-2.el6 in Red Hat Enterprise Linux (RHEL) 6 and ibutils-1.2-11.2.el5 in Red Hat Enterprise Linux (RHEL) 5 allows local users to gain privileges via a Trojan Horse program in refix/lib/, related to an incorrect RPATH setting in the ELF header.

Affected (2)

Products: Openfabrics: Ibutils

1 product

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Openfabrics Ibutils	Version 1.5.7-2

Running on/with	Platform Versions
Redhat Enterprise Linux	Version 6.0

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Openfabrics Ibutils	Version 1.2-11.2

Running on/with	Platform Versions
Redhat Enterprise Linux	Version 5

Related CWEs

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (4)

http://rhn.redhat.com/errata/RHSA-2012-0311.html

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=457935

Source: secalert@redhat.com

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2012-0311.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=457935

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.