cbcvebase.
CVE-2013-2561
published 2013-11-23

CVE-2013-2561: OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagnet.db, (2) ibdiagnet.fdbs, (3) ibdiagnet_ibis.log…

PriorityP420medium6.3CVSS 2.0
AVLACMAuNCNICAC
EPSS
0.47%
38.0th percentile
OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagnet.db, (2) ibdiagnet.fdbs, (3) ibdiagnet_ibis.log, (4) ibdiagnet.log, (5) ibdiagnet.lst, (6) ibdiagnet.mcfdbs, (7) ibdiagnet.pkey, (8) ibdiagnet.psl, (9) ibdiagnet.slvl, or (10) ibdiagnet.sm in /tmp/.

Affected

7 ranges
VendorProductVersion rangeFixed in
debianibutils< ibutils 1.5.7-2 (bookworm)ibutils 1.5.7-2 (bookworm)
openfabricsibutils——
openfabricsibutils>= 0 < 1.5.7-21.5.7-2
openfabricsibutils>= 0 < 1.5.7-21.5.7-2
openfabricsibutils>= 0 < 1.5.7-21.5.7-2
openfabricsibutils>= 0 < 1.5.7-21.5.7-2
redhatenterprise_linux——

CVSS provenance

nvdv2.06.3MEDIUMAV:L/AC:M/Au:N/C:N/I:C/A:C
osv6.3MEDIUM
vendor_debian6.3LOW
vendor_redhat6.3MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.