{"id":"CVE-2011-4339","aliases":["DEBIAN-CVE-2011-4339","DSA-2376-1","DSA-2376-2","EUVD-2011-4271","GHSA-g5hf-fh87-v7gq","RHSA-2011:1814","RHSA-2013:0123"],"status":"published","title":"ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red...","description":"ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.","severity":{"version":"2.0","score":3.6,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00425,"percentile":0.36999,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-732"],"published":"2011-12-15T02:00:00Z","modified":"2026-10-23T17:47:49Z","fixes":[{"ecosystem":"Debian:12","package":"ipmitool","fixed_in":["1.8.11-5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ipmitool","fixed_in":["1.8.11-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ipmitool","fixed_in":["1.8.11-5"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"ipmitool","fixed_in":["1.8.11-2+squeeze2"],"sources":["osv"]},{"ecosystem":"Debian:5.0","package":"ipmitool","fixed_in":["1.8.9-2+squeeze1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipmitool","fixed_in":["0:1.8.11-12.el6_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipmitool-debuginfo","fixed_in":["0:1.8.11-12.el6_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipmitool","fixed_in":["0:1.8.11-12.el6_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipmitool-debuginfo","fixed_in":["0:1.8.11-12.el6_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipmitool","fixed_in":["0:1.8.11-12.el6_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipmitool-debuginfo","fixed_in":["0:1.8.11-12.el6_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipmitool","fixed_in":["0:1.8.11-12.el6_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipmitool-debuginfo","fixed_in":["0:1.8.11-12.el6_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"OpenIPMI","fixed_in":["0:2.0.16-16.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"OpenIPMI-debuginfo","fixed_in":["0:2.0.16-16.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"OpenIPMI-devel","fixed_in":["0:2.0.16-16.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"OpenIPMI","fixed_in":["0:2.0.16-16.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"OpenIPMI-debuginfo","fixed_in":["0:2.0.16-16.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"OpenIPMI-gui","fixed_in":["0:2.0.16-16.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"OpenIPMI-libs","fixed_in":["0:2.0.16-16.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"OpenIPMI-perl","fixed_in":["0:2.0.16-16.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"OpenIPMI-python","fixed_in":["0:2.0.16-16.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"OpenIPMI-tools","fixed_in":["0:2.0.16-16.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"OpenIPMI","fixed_in":["0:2.0.16-16.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"OpenIPMI-debuginfo","fixed_in":["0:2.0.16-16.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"OpenIPMI-devel","fixed_in":["0:2.0.16-16.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"OpenIPMI-gui","fixed_in":["0:2.0.16-16.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"OpenIPMI-libs","fixed_in":["0:2.0.16-16.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"OpenIPMI-perl","fixed_in":["0:2.0.16-16.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"OpenIPMI-python","fixed_in":["0:2.0.16-16.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"OpenIPMI-tools","fixed_in":["0:2.0.16-16.el5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"ipmitool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.11-5"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ipmitool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.11-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ipmitool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.11-5"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"ipmitool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.11-2+squeeze2"}]}],"versions":["1.8.11-2","1.8.11-2+squeeze1"]},{"source":"osv","ecosystem":"Debian:5.0","package":"ipmitool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.9-2+squeeze1"}]}],"versions":["1.8.9-2"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipmitool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.11-12.el6_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipmitool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.11-12.el6_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipmitool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.11-12.el6_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipmitool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.11-12.el6_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipmitool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.11-12.el6_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipmitool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.11-12.el6_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipmitool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.11-12.el6_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipmitool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.11-12.el6_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"OpenIPMI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-16.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"OpenIPMI-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-16.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"OpenIPMI-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-16.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"OpenIPMI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-16.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"OpenIPMI-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-16.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"OpenIPMI-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-16.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"OpenIPMI-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-16.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"OpenIPMI-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-16.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"OpenIPMI-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-16.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"OpenIPMI-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-16.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"OpenIPMI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-16.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"OpenIPMI-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-16.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"OpenIPMI-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-16.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"OpenIPMI-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-16.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"OpenIPMI-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-16.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"OpenIPMI-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-16.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"OpenIPMI-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-16.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"OpenIPMI-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-16.el5"}]}]}],"products":[{"vendor":"ipmitool_project","product":"ipmitool"}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:196","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Broken Link","advisory"]},{"url":"http://secunia.com/advisories/47228","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","advisory"]},{"url":"http://secunia.com/advisories/47376","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=742837","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","fix","report"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/71763","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.securityfocus.com/bid/51036","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2376","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1814.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071575.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://openwall.com/lists/oss-security/2011/12/13/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://secunia.com/advisories/47173","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071580.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0123.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4339","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-g5hf-fh87-v7gq"},{"url":"https://security-tracker.debian.org/tracker/CVE-2011-4339","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2011:1814","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1814.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-4339","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4339","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0123","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=658762","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=671059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=740780","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=749796","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=829705","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0123.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2011-4339","description":"ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.","status":"published","published":"2011-12-15T02:00:00Z","modified":"2024-08-07T00:01:51.65Z","updated_at":"2026-11-02T14:35:37.671707Z"}],"euvd":[{"id":"EUVD-2011-4271","description":"ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.","status":"published","published":"2011-12-15T02:00:00Z","modified":"2024-08-07T00:01:51Z","updated_at":"2026-11-03T01:39:48.961231Z"}],"ghsa":[{"id":"GHSA-g5hf-fh87-v7gq","title":"ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red...","description":"ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.","status":"published","published":"2022-05-13T01:03:59Z","modified":"2023-02-01T05:02:48Z","cwes":["CWE-732"],"updated_at":"2026-11-02T14:49:58.498747Z"}],"nvd":[{"id":"CVE-2011-4339","description":"ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.","status":"published","published":"2011-12-15T03:57:34.183Z","modified":"2026-06-16T23:34:48.21Z","cvss":[{"version":"2.0","score":3.6,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:02:11.800512Z"}],"osv":[{"id":"CVE-2011-4339","description":"ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.","status":"published","published":"2011-12-15T03:57:34Z","modified":"2026-04-10T03:42:03.114986Z","updated_at":"2026-11-02T15:43:58.279353Z"},{"id":"DEBIAN-CVE-2011-4339","description":"ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.","status":"published","published":"2011-12-15T03:57:34.183Z","modified":"2026-10-23T17:47:49.04243804Z","updated_at":"2026-11-02T15:45:24.612044Z"},{"id":"DSA-2376-1","title":"ipmitool - insecure pid file","status":"published","published":"2011-12-30T00:00:00Z","modified":"2026-03-09T01:23:11.140337Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"DSA-2376-2","title":"ipmitool - insecure pid file","status":"published","published":"2011-12-31T00:00:00Z","modified":"2026-03-09T01:22:00.211821Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"RHSA-2011:1814","title":"Red Hat Security Advisory: ipmitool security update","status":"published","published":"2024-09-15T19:34:57Z","modified":"2026-06-26T10:17:22Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2013:0123","title":"Red Hat Security Advisory: OpenIPMI security, bug fix, and enhancement update","status":"published","published":"2024-09-15T19:35:01Z","modified":"2026-06-26T12:21:43.020846683Z","updated_at":"2026-11-02T15:53:01.495018Z"}]}}