Test ID:	1.3.6.1.4.1.25623.1.0.120551
Category:	Amazon Linux Local Security Checks
Title:	Amazon Linux: Security Advisory (ALAS-2013-256)
Summary:	The remote host is missing an update for the 'openmpi' package(s) announced via the ALAS-2013-256 advisory.
Description:	Summary: The remote host is missing an update for the 'openmpi' package(s) announced via the ALAS-2013-256 advisory. Vulnerability Insight: A flaw was found in the way ibutils handled temporary files. A local attacker could use this flaw to cause arbitrary files to be overwritten as the root user via a symbolic link attack. It was discovered that librdmacm used a static port to connect to the ib_acm service. A local attacker able to run a specially crafted ib_acm service on that port could use this flaw to provide incorrect address resolution information to librmdacm applications. Affected Software/OS: 'openmpi' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 6.3 CVSS Vector: AV:L/AC:M/Au:N/C:N/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4516 55896 http://www.securityfocus.com/bid/55896 [oss-security] 20121011 CVE Request -- librdmacm (one issue) / ibacm (two issues) http://www.openwall.com/lists/oss-security/2012/10/11/6 [oss-security] 20121011 Re: CVE Request -- librdmacm (one issue) / ibacm (two issues) http://www.openwall.com/lists/oss-security/2012/10/11/9 http://git.openfabrics.org/git?p=~shefty/librdmacm.git%3Ba=commitdiff%3Bh=4b5c1aa734e0e734fc2ba3cd41d0ddf02170af6d https://bugzilla.redhat.com/show_bug.cgi?id=865483 Common Vulnerability Exposure (CVE) ID: CVE-2013-2561 BugTraq ID: 58335 http://www.securityfocus.com/bid/58335 http://seclists.org/fulldisclosure/2013/Mar/87 http://www.openwall.com/lists/oss-security/2013/03/26/1 http://www.openwall.com/lists/oss-security/2013/03/26/11 http://www.openwall.com/lists/oss-security/2013/03/26/4 http://www.openwall.com/lists/oss-security/2013/03/19/8 RedHat Security Advisories: RHSA-2013:1661 http://rhn.redhat.com/errata/RHSA-2013-1661.html
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.