IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted environment variables to a /usr/lpp/mmfs/bin/ setuid program.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Spectrum_scale | Ibm | 4.1.1.0 (including) | 4.1.1.0 (including) |
| Spectrum_scale | Ibm | 4.1.1.1 (including) | 4.1.1.1 (including) |
| Spectrum_scale | Ibm | 4.1.1.2 (including) | 4.1.1.2 (including) |
| Spectrum_scale | Ibm | 4.1.1.3 (including) | 4.1.1.3 (including) |
| Spectrum_scale | Ibm | 4.1.1.4 (including) | 4.1.1.4 (including) |
| Spectrum_scale | Ibm | 4.1.1.5 (including) | 4.1.1.5 (including) |
| Spectrum_scale | Ibm | 4.1.1.6 (including) | 4.1.1.6 (including) |
| Spectrum_scale | Ibm | 4.1.1.7 (including) | 4.1.1.7 (including) |
| Spectrum_scale | Ibm | 4.1.1.8 (including) | 4.1.1.8 (including) |
| Spectrum_scale | Ibm | 4.2.0.0 (including) | 4.2.0.0 (including) |
| Spectrum_scale | Ibm | 4.2.0.1 (including) | 4.2.0.1 (including) |
| Spectrum_scale | Ibm | 4.2.0.2 (including) | 4.2.0.2 (including) |
| Spectrum_scale | Ibm | 4.2.0.3 (including) | 4.2.0.3 (including) |