CVE-2011-3124

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to gain privileges via unknown vectors.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/45036	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1JR39769
http://www.ibm.com/support/docview.wss?uid=swg21504279
http://www.ibm.com/support/docview.wss?uid=swg24030333
http://www.securityfocus.com/bid/48516

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:ibm:infosphere_datastage:8.5:::::::*
	cpe:2.3:a:ibm:infosphere_datastage:8.5.0.1:::::::*
	cpe:2.3:a:ibm:infosphere_information_server:8.5:::::::*
	cpe:2.3:a:ibm:infosphere_information_server:8.5.0.1:::::::*

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2011-08-10 20:55

Updated : 2012-06-15 04:00

NVD link : CVE-2011-3124

Mitre link : CVE-2011-3124

CVE.ORG link : CVE-2011-3124

JSON object : View

Products Affected

ibm

infosphere_information_server
infosphere_datastage

linux

linux_kernel

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2011-3124", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-08-10T20:55:01.970", "references": [{"url": "http://secunia.com/advisories/45036", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1JR39769", "source": "cve@mitre.org"}, {"url": "http://www.ibm.com/support/docview.wss?uid=swg21504279", "source": "cve@mitre.org"}, {"url": "http://www.ibm.com/support/docview.wss?uid=swg24030333", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/48516", "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to gain privileges via unknown vectors."}, {"lang": "es", "value": "IBM InfoSphere Information Server 8.5 y 8.5.0.1 en Unix y Linux, tal como se usa en IBM InfoSphere DataStage 8.5 y 8.5.0.1 y otros productos, asigna incorrectamente la propiedad de fiheros sin especificar, lo que permite a usuarios locales escalar privilegios a trav\u00e9s de vectores desconocidos."}], "lastModified": "2012-06-15T04:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:infosphere_datastage:8.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E1E57DBA-34A3-4CA8-AA8D-6055DC756779"}, {"criteria": "cpe:2.3:a:ibm:infosphere_datastage:8.5.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B3647376-98A9-41E9-880A-BB4EDF826E87"}, {"criteria": "cpe:2.3:a:ibm:infosphere_information_server:8.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA7096B4-291F-49BB-8DBC-E67AC901CF08"}, {"criteria": "cpe:2.3:a:ibm:infosphere_information_server:8.5.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D547E88D-FE3F-4C90-B7D8-301A1449E9AB"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "155AD4FB-E527-4103-BCEF-801B653DEA37"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}