Vulnerability Description
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to gain privileges via vectors involving (1) arp.ib or (2) ibstat.
CVSS Score
7.2
HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Aix | 6.1 |
| Ibm | Vios | 2.2.2.2 |
References
- http://aix.software.ibm.com/aix/efixes/security/infiniband_advisory.ascVendor Advisory
- http://osvdb.org/95419
- http://osvdb.org/95420
- http://secunia.com/advisories/54215
- http://www.ibm.com/support/docview.wss?uid=isg1IV43561Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IV43562Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IV43580Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IV43582Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IV43756Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IV43827Vendor Advisory
- http://www.securityfocus.com/bid/61287
- http://www.securitytracker.com/id/1028792
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85617
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
- http://aix.software.ibm.com/aix/efixes/security/infiniband_advisory.ascVendor Advisory
FAQ
What is CVE-2013-4011?
CVE-2013-4011 is a vulnerability with a CVSS score of 7.2 (HIGH). Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to gain privileges via vectors involving (1) arp.ib or (2) ibst...
How severe is CVE-2013-4011?
CVE-2013-4011 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-4011?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Aix, Ibm Vios.