IBM General Parallel File System CVE-2015-0197 Unspecified Local Privilege Escalation Vulnerability
BID:73282
Info
IBM General Parallel File System CVE-2015-0197 Unspecified Local Privilege Escalation Vulnerability
| Bugtraq ID: | 73282 |
| Class: | Design Error |
| CVE: |
CVE-2015-0197 |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 18 2015 12:00AM |
| Updated: | Oct 09 2018 02:00PM |
| Credit: | Florian Grunow and Felix Wilhelm of ERNW. |
| Vulnerable: |
IBM Virtualization Engine TS7700 0 IBM Storwize V7000 Unified 1.4.3 4 IBM Storwize V7000 Unified 1.4.3 3 IBM Storwize V7000 Unified 1.4.3 2 IBM Storwize V7000 Unified 1.4 1 IBM Storwize V7000 Unified 1.4 0 IBM Storwize V7000 Unified 1.3.2 1 IBM Storwize V7000 Unified 1.3.2 0 IBM Storwize V7000 Unified 1.5.2.0 IBM Storwize V7000 Unified 1.5.1.3 IBM Storwize V7000 Unified 1.5.0.2 IBM Storwize V7000 Unified 1.5.0.1 IBM Storwize V7000 Unified 1.5.0.0 IBM Storwize V7000 Unified 1.5 IBM Storwize V7000 Unified 1.4.3.0 IBM Storwize V7000 Unified 1.4.2.1 IBM Storwize V7000 Unified 1.4.2.0 IBM Storwize V7000 Unified 1.4.1.1 IBM Storwize V7000 Unified 1.4.1.0 IBM Storwize V7000 Unified 1.4 IBM Storwize V7000 Unified 1.3.1.0 IBM Storwize V7000 Unified 1.3.0.5 IBM Storwize V7000 Unified 1.3.0.0 IBM Smart Analytics System 7710 0 IBM Smart Analytics System 7700 0 IBM Smart Analytics System 7600 0 IBM Scale Out Network Attached Storage 1.5.1 IBM Scale Out Network Attached Storage 1.3.2 IBM Scale Out Network Attached Storage 1.3.1 IBM Scale Out Network Attached Storage 1.5.2.1 IBM Scale Out Network Attached Storage 1.5.2.0 IBM Scale Out Network Attached Storage 1.5 IBM Scale Out Network Attached Storage 1.4.3.4 IBM Scale Out Network Attached Storage 1.4.3.3 IBM Scale Out Network Attached Storage 1.4.2.1 IBM Scale Out Network Attached Storage 1.4.2.0 IBM Scale Out Network Attached Storage 1.4.1.0 IBM Scale Out Network Attached Storage 1.4.0.0 IBM Scale Out Network Attached Storage 1.3.2.3 IBM Scale Out Network Attached Storage 1.3.2.2 IBM Scale Out Network Attached Storage 1.3.0.5 IBM Scale Out Network Attached Storage 1.3.0.4 IBM Scale Out Network Attached Storage 1.3.0.0 IBM PureData System for Operational Analytics 1.1 (A1801) IBM PureData System for Operational Analytics 1.0 (A1791) IBM PureApplication System 2.1 IBM PureApplication System 2.0 IBM InfoSphere BigInsights 3.0 1 IBM InfoSphere BigInsights 3.0 0 IBM InfoSphere BigInsights 2.1.2 IBM InfoSphere BigInsights 2.1.1 0 IBM InfoSphere BigInsights 2.1.1 IBM InfoSphere BigInsights 3.0.0.2 IBM InfoSphere BigInsights 2.1.0.3 IBM InfoSphere BigInsights 2.1.0.2 IBM InfoSphere BigInsights 2.1.0.1 IBM InfoSphere BigInsights 2.1.0.0 IBM InfoSphere BigInsights 2.1 IBM General Parallel File System(GPFS) 4.1 IBM General Parallel File System(GPFS) 4.1.0.6 IBM General Parallel File System(GPFS) 3.5.0.23 IBM General Parallel File System(GPFS) 3.4.0.31 IBM General Parallel File System (GPFS) 3.5.0.19 IBM General Parallel File System (GPFS) 3.5.0.16 IBM General Parallel File System (GPFS) 3.5.0 IBM General Parallel File System (GPFS) 3.4.0.27 IBM General Parallel File System (GPFS) 3.4.0 IBM DB2 Workgroup Server Edition 10.5 IBM DB2 Workgroup Server Edition 10.1 IBM DB2 pureScale Feature for Enterprise Server Edition 9.8 IBM DB2 Express Edition 10.5 IBM DB2 Express Edition 10.1 IBM DB2 Enterprise Server Edition 10.5 IBM DB2 Enterprise Server Edition 10.1 IBM DB2 Connect Unlimited Edition for System z 10.5 IBM DB2 Connect Unlimited Edition for System z 10.1 IBM DB2 Connect Unlimited Edition for System i 10.5 IBM DB2 Connect Unlimited Edition for System i 10.1 IBM DB2 Connect Enterprise Edition 10.5 IBM DB2 Connect Enterprise Edition 10.1 IBM DB2 Connect Application Server Edition 10.5 IBM DB2 Connect Application Server Edition 10.1 IBM DB2 Advanced Workgroup Server Edition 10.5 IBM DB2 Advanced Workgroup Server Edition 10.1 IBM DB2 Advanced Enterprise Server Edition 10.5 IBM DB2 Advanced Enterprise Server Edition 10.1 |
| Not Vulnerable: |
IBM Storwize V7000 Unified 1.5.2.1 IBM Scale Out Network Attached Storage 1.5.2.1 IBM PureApplication System 2.1.0.1 IBM PureApplication System 2.0.0.1 Interim Fix IBM General Parallel File System(GPFS) 4.1.0.7 IBM General Parallel File System(GPFS) 3.5.0.24 IBM General Parallel File System(GPFS) 3.4.0.32 IBM DB2 Workgroup Server Edition 10.5 FP6 IBM DB2 Workgroup Server Edition 10.1 FP5 IBM DB2 Express Edition 10.5 FP6 IBM DB2 Express Edition 10.1 FP5 IBM DB2 Enterprise Server Edition 10.5 FP6 IBM DB2 Enterprise Server Edition 10.1 FP5 IBM DB2 Connect Unlimited Edition for System z 10.5 FP6 IBM DB2 Connect Unlimited Edition for System z 10.1 FP5 IBM DB2 Connect Unlimited Edition for System i 10.5 FP6 IBM DB2 Connect Unlimited Edition for System i 10.1 FP5 IBM DB2 Connect Enterprise Edition 10.5 FP6 IBM DB2 Connect Enterprise Edition 10.1 FP5 IBM DB2 Connect Application Server Edition 10.5 FP6 IBM DB2 Connect Application Server Edition 10.1 FP5 IBM DB2 Advanced Workgroup Server Edition 10.5 FP6 IBM DB2 Advanced Workgroup Server Edition 10.1 FP5 IBM DB2 Advanced Enterprise Server Edition 10.5 FP6 IBM DB2 Advanced Enterprise Server Edition 10.1 FP5 |
Discussion
IBM General Parallel File System CVE-2015-0197 Unspecified Local Privilege Escalation Vulnerability
IBM General Parallel File System is prone to an unspecified local privilege escalation vulnerability.
An attacker can exploit this vulnerability to execute arbitrary code with root privileges.
Following versions are vulnerable:
IBM General Parallel File System 4.1.0.0 through 4.1.0.6
IBM General Parallel File System 3.5.0.0 through 3.5.0.23
IBM General Parallel File System 3.4.0.0 through 3.4.0.31
IBM General Parallel File System is prone to an unspecified local privilege escalation vulnerability.
An attacker can exploit this vulnerability to execute arbitrary code with root privileges.
Following versions are vulnerable:
IBM General Parallel File System 4.1.0.0 through 4.1.0.6
IBM General Parallel File System 3.5.0.0 through 3.5.0.23
IBM General Parallel File System 3.4.0.0 through 3.4.0.31
Exploit / POC
IBM General Parallel File System CVE-2015-0197 Unspecified Local Privilege Escalation Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
IBM General Parallel File System CVE-2015-0197 Unspecified Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
IBM General Parallel File System CVE-2015-0197 Unspecified Local Privilege Escalation Vulnerability
References:
References:
- IBM General Parallel File System privilege escalation (IBM)
- IBM PureApplication System is affected by security vulnerabilities (CVE-2015-019 (IBM)
- Security Bulletin: GPFS security vulnerabilities in IBM SONAS (CVE-2015-0197 and (IBM)
- Security Bulletin: GPFS security vulnerabilities in IBM Storwize V7000 Unified ( (IBM)
- Security Bulletin: IBM General Parallel File System is affected by security vuln (IBM)
- Security Bulletin: IBM Virtualization Engine TS7700 is affected by vulnerabiliti (IBM)
- Security Bulletin: Vulnerabilities in GPFS affect InfoSphere BigInsights (CVE-20 (IBM)
- swg21962616 : Multiple security vulnerabilities have been identified in IBM Gene (IBM)