PT-2006-2263 · Ibm · Aix

Publicado 2006-04-19 · Atualizado 2018-10-18 · CVE-2006-1247

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:L/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions AIX versions 5.1.0 through 5.3.0

Description The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files, specifically through the rm mlcache file function in bos.rte.install.

Recommendations For AIX versions 5.1.0 through 5.3.0, consider restricting access to the rm mlcache file function in bos.rte.install to prevent local users from overwriting arbitrary files until a patch is available.

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2006-1247

Produtos afetados

Aix

Referências · 11

• https://nvd.nist.gov/vuln/detail/CVE-2006-1247 · Nota de Segurança
• http://www-1.ibm.com/support/docview.wss?uid=isg1IY82357 · Correção, Aviso do Fabricante
• http://secunia.com/advisories/19656 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25848 · Nota
• http://osvdb.org/24706 · Nota
• http://securityfocus.com/bid/17576 · Correção
• http://securityfocus.com/archive/1/431846/100/0/threaded · Nota
• http://securitytracker.com/id?1015952 · Nota
• http://vupen.com/english/advisories/2006/1389 · Aviso do Fabricante
• http://nsfocus.com/english/homepage/research/0603.htm · Aviso do Fabricante
• http://securityfocus.com/archive/1/431848/100/0/threaded · Nota