CVE-2011-4339
LOW · CVSS 3.6EPSS 0.4%EU EUVD
ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.
Key facts
- CVSS score
- 3.6 (v2.0)
- Severity
- LOW
- CVSS vector
AV:L/AC:L/Au:N/C:N/I:P/A:P- Weakness (CWE)
- CWE-732
- EPSS score
- 0.4% (37th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2011-4271)
- Published
- December 15, 2011
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2011-4271 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- ipmitool project / ipmitool
- redhat / enterprise linux
References
- http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071575.html(Third Party Advisory)
- http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071580.html(Third Party Advisory)
- http://openwall.com/lists/oss-security/2011/12/13/1(Mailing List, Third Party Advisory)
- http://rhn.redhat.com/errata/RHSA-2013-0123.html(Third Party Advisory)
- http://secunia.com/advisories/47173(Broken Link)
- http://secunia.com/advisories/47228(Broken Link)
- http://secunia.com/advisories/47376(Broken Link)
- http://www.debian.org/security/2011/dsa-2376(Third Party Advisory)
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:196(Broken Link)
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html(Third Party Advisory)
- http://www.redhat.com/support/errata/RHSA-2011-1814.html(Third Party Advisory)
- http://www.securityfocus.com/bid/51036(Third Party Advisory, VDB Entry)
- http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf(Third Party Advisory)
- https://bugzilla.redhat.com/show_bug.cgi?id=742837(Issue Tracking, Patch)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71763(Third Party Advisory, VDB Entry)
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain