CVEvulnerability
CVE-2010-4173
3.3 LOW
Official page ↗
- Status
- Modified
- Published
- 2010-11-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.3 LOW — AV:L/AC:M/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-59
Description
The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file.
Affected configurations
• openfabrics libsdp (<= 1.1.104)
• openfabrics libsdp 1.1.99
• openfabrics libsdp 1.1.100
• openfabrics libsdp 1.1.101
• openfabrics libsdp 1.1.102
• openfabrics libsdp 1.1.103
Related
Weakness · CWE (1)
- CWE-59 Improper Link Resolution Before File Access weakness
References
- http://www.openfabrics.org/downloads/libsdp/libsdp-1.1.105-0.4.g1b9b996.tar.gz Patch
- http://www.openwall.com/lists/oss-security/2010/11/16/2 Patch
- http://www.openwall.com/lists/oss-security/2010/11/16/7 Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=647941 Patch
- http://www.openfabrics.org/downloads/libsdp/libsdp-1.1.105-0.4.g1b9b996.tar.gz Patch
- http://www.openwall.com/lists/oss-security/2010/11/16/2 Patch
- http://www.openwall.com/lists/oss-security/2010/11/16/7 Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=647941 Patch