IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted command-line parameters to a /usr/lpp/mmfs/bin/ setuid program.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Spectrum_scale | Ibm | 4.1.1.0 (including) | 4.1.1.0 (including) |
| Spectrum_scale | Ibm | 4.1.1.1 (including) | 4.1.1.1 (including) |
| Spectrum_scale | Ibm | 4.1.1.2 (including) | 4.1.1.2 (including) |
| Spectrum_scale | Ibm | 4.1.1.3 (including) | 4.1.1.3 (including) |
| Spectrum_scale | Ibm | 4.1.1.4 (including) | 4.1.1.4 (including) |
| Spectrum_scale | Ibm | 4.1.1.5 (including) | 4.1.1.5 (including) |
| Spectrum_scale | Ibm | 4.1.1.6 (including) | 4.1.1.6 (including) |
| Spectrum_scale | Ibm | 4.1.1.7 (including) | 4.1.1.7 (including) |
| Spectrum_scale | Ibm | 4.1.1.8 (including) | 4.1.1.8 (including) |
| Spectrum_scale | Ibm | 4.2.0.0 (including) | 4.2.0.0 (including) |
| Spectrum_scale | Ibm | 4.2.0.1 (including) | 4.2.0.1 (including) |
| Spectrum_scale | Ibm | 4.2.0.2 (including) | 4.2.0.2 (including) |
| Spectrum_scale | Ibm | 4.2.0.3 (including) | 4.2.0.3 (including) |