PT-2007-5431 · Ibm · Aix

Publicado 2007-08-08 · Atualizado 2011-03-08 · CVE-2007-4238

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AIX versions 5.2 through 5.3

Description The issue allows local users with certain privileges to gain root privileges by modifying the pioinit file, which is installed with user and group ownership of bin.

Recommendations For AIX versions 5.2 through 5.3, consider changing the ownership of the pioinit file to prevent local users from modifying it and gaining root privileges.

Correção

Identificadores relacionados

CVE-2007-4238

Produtos afetados

Aix

Referências · 7

• http://www-1.ibm.com/support/docview.wss?uid=isg1IY79785 · Aviso do Fabricante
• http://osvdb.org/36782 · Nota
• http://vupen.com/english/advisories/2007/2678 · Nota
• http://secunia.com/advisories/26219 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4238 · Nota de Segurança
• http://www-1.ibm.com/support/docview.wss?uid=isg1IY79786 · Aviso do Fabricante
• http://securitytracker.com/id?1018468 · Nota