CVE-2010-4173: Openfabrics Libsdp

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file.

Affected products

• Openfabrics Libsdp: up to and including 1.1.104; version 1.1.99 only; version 1.1.100 only; version 1.1.101 only; version 1.1.102 only; version 1.1.103 only

Published 2010-11-22. Last modified 2026-06-16.