CVE-2016-2985

High

Published: 25/11/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM Spectrum Scale and General Parallel File System (GPFS) have a vulnerability that allows local users to gain elevated privileges via crafted environment variables in a setuid program.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the system and potential takeover by local users.

Recommendation

It is recommended to update IBM Spectrum Scale to version 4.1.1.8 or 4.2.0.4 and GPFS to version 3.5.0.32 or 4.1.1.8 to mitigate this vulnerability.

Other vulnerabilities in IBM Spectrum Scale 4.1.1.x (before 4.1.1.8), 4.2.x (before 4.2.0.4) oraz GPFS 3.5.x (before 3.5.0.32), 4.1.x (before 4.1.1.8)

CVE-2016-2984High
IBM Spectrum Scale and General Parallel File System (GPFS) have a vulnerability that allows local users to gain elevated privileges via crafted command-line parameters to a setuid program.

Original NVD description (English source)

IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted environment variables to a /usr/lpp/mmfs/bin/ setuid program.