{"id":"CVE-2016-0392","aliases":["EUVD-2016-0427","GHSA-9mj9-6mfj-6q3h"],"status":"published","title":"IBM General Parallel File System (GPFS) in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic...","description":"IBM General Parallel File System (GPFS) in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x before 4.0.3, as distributed in Spectrum Scale RAID, allows local users to gain privileges via a crafted parameter to a setuid program.","severity":{"version":"3.0","score":8.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.005,"percentile":0.4313,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284"],"published":"2016-06-19T20:00:00Z","modified":"2026-06-17T00:37:26Z","products":[{"vendor":"ibm","product":"elastic_storage_server"},{"vendor":"ibm","product":"general_parallel_file_system_storage_server"}],"references":[{"url":"http://www.securityfocus.com/bid/91082","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://packetstormsecurity.com/files/137373/IBM-GPFS-Spectrum-Scale-Command-Injection.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV84206","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"http://www.securitytracker.com/id/1036458","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/538620/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005875","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0392"},{"url":"https://github.com/advisories/GHSA-9mj9-6mfj-6q3h"}],"sources":{"cve":[{"id":"CVE-2016-0392","description":"IBM General Parallel File System (GPFS) in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x before 4.0.3, as distributed in Spectrum Scale RAID, allows local users to gain privileges via a crafted parameter to a setuid program.","status":"published","published":"2016-06-19T20:00:00Z","modified":"2024-08-05T22:15:24.334Z","updated_at":"2026-11-02T14:33:37.446553Z"}],"euvd":[{"id":"EUVD-2016-0427","description":"IBM General Parallel File System (GPFS) in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x before 4.0.3, as distributed in Spectrum Scale RAID, allows local users to gain privileges via a crafted parameter to a setuid program.","status":"published","published":"2016-06-19T20:00:00Z","modified":"2024-08-05T22:15:24Z","updated_at":"2026-11-03T02:23:01.297813Z"}],"ghsa":[{"id":"GHSA-9mj9-6mfj-6q3h","title":"IBM General Parallel File System (GPFS) in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic...","description":"IBM General Parallel File System (GPFS) in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x before 4.0.3, as distributed in Spectrum Scale RAID, allows local users to gain privileges via a crafted parameter to a setuid program.","status":"published","published":"2022-05-14T02:47:06Z","modified":"2023-02-02T05:06:17Z","cvss":[{"version":"3.0","score":8.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:52:16.705925Z"}],"nvd":[{"id":"CVE-2016-0392","description":"IBM General Parallel File System (GPFS) in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x before 4.0.3, as distributed in Spectrum Scale RAID, allows local users to gain privileges via a crafted parameter to a setuid program.","status":"published","published":"2016-06-19T20:59:02.16Z","modified":"2026-06-17T00:37:26.947Z","cvss":[{"version":"3.0","score":8.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:03:26.642445Z"}]}}