A security issue has been discovered in IMPItool, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

The security issue is caused due to ipmievd creating PID files with insecure permissions, which can be exploited to e.g. terminate other processes by exchanging the process ID stored in the PID file.

The security issue is confirmed in version 1.8.11. Other versions may also be affected.

Solution
Restrict access to trusted users only.

Provided and/or discovered by
Reported in a Red Hat bug report.

Original Advisory
Red Hat Bug #742837:
https://bugzilla.redhat.com/show_bug.cgi?id=742837

Deep Links
Links available to Secunia VIM customers