{"id":"CVE-2016-2984","aliases":["EUVD-2016-4057","GHSA-f573-78g9-q6g7"],"status":"published","title":"IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File...","description":"IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted command-line parameters to a /usr/lpp/mmfs/bin/ setuid program.","severity":{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00296,"percentile":0.22407,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2016-11-25T03:38:00Z","modified":"2026-06-17T00:44:46Z","products":[{"vendor":"ibm","product":"general_parallel_file_system"},{"vendor":"ibm","product":"spectrum_scale"}],"references":[{"url":"http://www.securityfocus.com/bid/92410","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1007994","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2984"},{"url":"https://github.com/advisories/GHSA-f573-78g9-q6g7"}],"sources":{"cve":[{"id":"CVE-2016-2984","description":"IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted command-line parameters to a /usr/lpp/mmfs/bin/ setuid program.","status":"published","published":"2016-11-25T03:38:00Z","modified":"2024-08-05T23:40:14.325Z","updated_at":"2026-11-02T14:33:33.424551Z"}],"euvd":[{"id":"EUVD-2016-4057","description":"IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted command-line parameters to a /usr/lpp/mmfs/bin/ setuid program.","status":"published","published":"2016-11-25T03:38:00Z","modified":"2024-08-05T23:40:14Z","updated_at":"2026-11-03T02:22:51.669902Z"}],"ghsa":[{"id":"GHSA-f573-78g9-q6g7","title":"IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File...","description":"IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted command-line parameters to a /usr/lpp/mmfs/bin/ setuid program.","status":"published","published":"2022-05-17T03:42:44Z","modified":"2023-01-27T05:08:59Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:43:21.16147Z"}],"nvd":[{"id":"CVE-2016-2984","description":"IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted command-line parameters to a /usr/lpp/mmfs/bin/ setuid program.","status":"published","published":"2016-11-25T03:59:01.67Z","modified":"2026-06-17T00:44:46.433Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:03:32.086916Z"}]}}