CVSS: 9.0EPSS: 4%CPEs: 27EXPL: 0CVE-2016-6115
https://notcve.org/view.php?id=CVE-2016-6115
IBM General Parallel File System is vulnerable to a buffer overflow. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with root privileges or cause the server to crash. IBM General Parallel File System es vulnerable a un desbordamiento de búfer. Un atacante remoto autenticado podría desbordar un búfer y ejecutar código arbitrario en el sistema con privilegios de root o provocar que el servidor se caiga. • http://www.ibm.com/support/docview.wss?uid=ssg1S1009639 http://www.securityfocus.com/bid/95272 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.0EPSS: 0%CPEs: 54EXPL: 0CVE-2016-2984
https://notcve.org/view.php?id=CVE-2016-2984
IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted command-line parameters to a /usr/lpp/mmfs/bin/ setuid program. IBM Spectrum Scale 4.1.1.x en versiones anteriores a 4.1.1.8 y 4.2.x en versiones anteriores a 4.2.0.4 y General Parallel File System (GPFS) 3.5.x en versiones anteriores a 3.5.0.32 y 4.1.x en versiones anteriores a 4.1.1.8 permiten a usuarios locales obtener privilegios a través de parámetros de línea de comando manipulados a un programa setuid /usr/lpp/mmfs/bin/. • http://www-01.ibm.com/support/docview.wss?uid=ssg1S1007994 http://www.securityfocus.com/bid/92410 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.0EPSS: 0%CPEs: 54EXPL: 0CVE-2016-2985
https://notcve.org/view.php?id=CVE-2016-2985
IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted environment variables to a /usr/lpp/mmfs/bin/ setuid program. IBM Spectrum Scale 4.1.1.x en versiones anteriores a 4.1.1.8 y 4.2.x en versiones anteriores a 4.2.0.4 y General Parallel File System (GPFS) 3.5.x en versiones anteriores a 3.5.0.32 y 4.1.x en versiones anteriores a 4.1.1.8 permiten a usuarios locales obtener privilegios a través de variables de entorno manipuladas a un programa setuid /usr/lpp/mmfs/bin/. • http://www-01.ibm.com/support/docview.wss?uid=ssg1S1007994 http://www.securityfocus.com/bid/92408 • CWE-264: Permissions, Privileges, and Access Controls •