PT-2005-4100 · Ibm · Aix

Publicado 2005-10-23 · Atualizado 2008-09-05 · CVE-2005-3289

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.2 through 5.3

Description The issue allows local users to corrupt system files, including /etc/passwd, by exploiting insecure temporary file creation in LSCFG. This can potentially lead to system compromise.

Recommendations For IBM AIX versions 5.2 through 5.3, consider restricting access to LSCFG to minimize the risk of exploitation until a secure method of temporary file creation is implemented.

Correção

Identificadores relacionados

CVE-2005-3289

Produtos afetados

Aix

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-3289 · Nota de Segurança
• http://www-1.ibm.com/support/docview.wss?uid=isg1IY77624 · Aviso do Fabricante
• http://secunia.com/advisories/17202 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=isg1IY77638 · Aviso do Fabricante
• http://securityfocus.com/bid/15105 · Nota
• http://securitytracker.com/id?1015061 · Nota