CVE-2010-1693: openibd in OpenFabrics Enterprise Distribution (OFED) 1.5.2 allows local users to overwrite arbitrary files vi

Routine

MEDIUM 6.3DOWNGRADE

CVE-2010-1693 is a medium-severity flaw (CVSS 6.3) affecting enterprise distribution. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

openibd in OpenFabrics Enterprise Distribution (OFED) 1.5.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ib_set_node_desc.sh temporary file.

Why this priority

No elevated risk signals yet

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	6.3 (Medium)
EPSS exploit chance	0.3% (top 76%)
CISA exploited list	No
Weakness	CWE-59
Published	2010-10-26
Last modified	2026-06-16

Publisher (CNA): Silicon Graphics (SGI) · Vendor: openfabrics

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2010-10-26 19:00 UTCPublished CVE record published
2026-06-16 23:19 UTCUpdated Record last modified

openfabrics enterprise distribution DOWNGRADE

Affected: 1.5.2

Fixed in: no fixed release known

Safe to downgrade to: a release before 1.5.2

1. Check installed version

apt-cache policy enterprise-distribution || rpm -q enterprise-distribution || enterprise-distribution --version

2. No fixed release: DOWNGRADE to a release before 1.5.2 (Debian / Ubuntu)

apt-cache madison enterprise-distribution sudo apt install enterprise-distribution=<VERSION_BEFORE_1.5.2> sudo apt-mark hold enterprise-distribution

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list enterprise-distribution sudo dnf downgrade enterprise-distribution-<VERSION_BEFORE_1.5.2> sudo dnf versionlock add enterprise-distribution

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2010-1693?

enterprise distribution: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2010-1693 being exploited?

CVE-2010-1693 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2010-1693 affect?

CVE-2010-1693 affects enterprise distribution. Severity is medium (CVSS 6.3). openibd in OpenFabrics Enterprise Distribution (OFED) 1.5.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ib_set_node_desc.sh temporary file.

How urgent is CVE-2010-1693?

Priority 28/100. No elevated risk signals yet.

Related CVEs

CVE-2011-3345 LOW 2.1 UPGRADE ulp/sdp/sdp_proc.c in the ib_sdp module (aka ib_sdp.ko) in the ofa_kernel package in the InfiniBand driver imp

References

← Back to latest CVEs