CVEvulnerability
CVE-2016-2985
7.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-11-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.0 HIGH — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted environment variables to a /usr/lpp/mmfs/bin/ setuid program.
Affected configurations
• ibm spectrum scale 4.1.1.0
• ibm spectrum scale 4.1.1.1
• ibm spectrum scale 4.1.1.2
• ibm spectrum scale 4.1.1.3
• ibm spectrum scale 4.1.1.4
• ibm spectrum scale 4.1.1.5
• ibm spectrum scale 4.1.1.6
• ibm spectrum scale 4.1.1.7
• ibm spectrum scale 4.1.1.8
• ibm spectrum scale 4.2.0.0
• ibm spectrum scale 4.2.0.1
• ibm spectrum scale 4.2.0.2
• ibm spectrum scale 4.2.0.3
• ibm general parallel file system 3.5.0.0
• ibm general parallel file system 3.5.0.1
• ibm general parallel file system 3.5.0.2
• ibm general parallel file system 3.5.0.3
• ibm general parallel file system 3.5.0.4
• ibm general parallel file system 3.5.0.5
• ibm general parallel file system 3.5.0.6
• ibm general parallel file system 3.5.0.7
• ibm general parallel file system 3.5.0.8
• ibm general parallel file system 3.5.0.9
• ibm general parallel file system 3.5.0.10
• ibm general parallel file system 3.5.0.11
• ibm general parallel file system 3.5.0.12
• ibm general parallel file system 3.5.0.13
• ibm general parallel file system 3.5.0.14
• ibm general parallel file system 3.5.0.15
• ibm general parallel file system 3.5.0.16
• ibm general parallel file system 3.5.0.17
• ibm general parallel file system 3.5.0.18
• ibm general parallel file system 3.5.0.19
• ibm general parallel file system 3.5.0.20
• ibm general parallel file system 3.5.0.21
• ibm general parallel file system 3.5.0.22
• ibm general parallel file system 3.5.0.23
• ibm general parallel file system 3.5.0.24
• ibm general parallel file system 3.5.0.25
• ibm general parallel file system 3.5.0.26
• ibm general parallel file system 3.5.0.27
• ibm general parallel file system 3.5.0.28
• ibm general parallel file system 3.5.0.29
• ibm general parallel file system 3.5.0.30
• ibm general parallel file system 3.5.0.31
• ibm general parallel file system 4.1.0.0
• ibm general parallel file system 4.1.0.1
• ibm general parallel file system 4.1.0.2
• ibm general parallel file system 4.1.0.3
• ibm general parallel file system 4.1.0.4
• ibm general parallel file system 4.1.0.5
• ibm general parallel file system 4.1.0.6
• ibm general parallel file system 4.1.0.7
• ibm general parallel file system 4.1.0.8
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=ssg1S1007994 Vendor Advisory
- http://www.securityfocus.com/bid/92408 www.securityfocus.com
- http://www-01.ibm.com/support/docview.wss?uid=ssg1S1007994 Vendor Advisory
- http://www.securityfocus.com/bid/92408 www.securityfocus.com