CVE-2010-1693

Published: Oct 26, 2010Modified: Apr 29, 2026

6.3

Vector

AV:L/AC:M/Au:N/C:N/I:C/A:C

Exploitability: 3.4 / Impact: 9.2

Source: NVD

Description

openibd in OpenFabrics Enterprise Distribution (OFED) 1.5.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ib_set_node_desc.sh temporary file.

Affected (1)

Products: Openfabrics: Enterprise Distribution

Openfabrics

1 product

Enterprise Distribution

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Openfabrics Enterprise Distribution	Version 1.5.2

Related CWEs

CWE-59

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (12)

http://lists.openfabrics.org/pipermail/ewg/2010-October/015886.html

Source: bc94ec7e-8909-4cbb-83df-d2fc9330fa88

http://secunia.com/advisories/41937

Source: bc94ec7e-8909-4cbb-83df-d2fc9330fa88

http://www.openwall.com/lists/oss-security/2010/10/22/1

Source: bc94ec7e-8909-4cbb-83df-d2fc9330fa88

http://www.osvdb.org/68856

Source: bc94ec7e-8909-4cbb-83df-d2fc9330fa88

http://www.securityfocus.com/bid/44332

Source: bc94ec7e-8909-4cbb-83df-d2fc9330fa88

https://exchange.xforce.ibmcloud.com/vulnerabilities/62753

Source: bc94ec7e-8909-4cbb-83df-d2fc9330fa88

http://lists.openfabrics.org/pipermail/ewg/2010-October/015886.html