librdmacm 'ib_acm' Service Port Connection Security Vulnerability
BID:55896
Info
librdmacm 'ib_acm' Service Port Connection Security Vulnerability
| Bugtraq ID: | 55896 |
| Class: | Design Error |
| CVE: |
CVE-2012-4516 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 12 2012 12:00AM |
| Updated: | May 07 2015 05:16PM |
| Credit: | Florian Weimer of Red Hat Product Security Team |
| Vulnerable: |
Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 librdmacm librdmacm 0 |
| Not Vulnerable: | |
Discussion
librdmacm 'ib_acm' Service Port Connection Security Vulnerability
librdmacm is prone to a security vulnerability because of a design error that causes the library to always connect to default port 6125 if the '/var/run/ibacm.port' file is not found.
An attacker may exploit this issue to send malicious address resolution information to the applications using the affected library. This may aid in other attacks.
To successfully exploit this issue, an attacker must be able to run a rogue 'ib_acm' service on port 6125 on a server which affected clients may connect to.
librdmacm is prone to a security vulnerability because of a design error that causes the library to always connect to default port 6125 if the '/var/run/ibacm.port' file is not found.
An attacker may exploit this issue to send malicious address resolution information to the applications using the affected library. This may aid in other attacks.
To successfully exploit this issue, an attacker must be able to run a rogue 'ib_acm' service on port 6125 on a server which affected clients may connect to.
Exploit / POC
librdmacm 'ib_acm' Service Port Connection Security Vulnerability
An attacker can exploit this issue by running a rogue 'ib_acm' service on port 6125 on a server which affected clients may connect to.
An attacker can exploit this issue by running a rogue 'ib_acm' service on port 6125 on a server which affected clients may connect to.
Solution / Fix
librdmacm 'ib_acm' Service Port Connection Security Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
librdmacm 'ib_acm' Service Port Connection Security Vulnerability
References:
References: