PT-2007-6769 · Ibm · Ibm Aix

Publicado 2007-11-05 · Atualizado 2017-07-29 · CVE-2007-5804

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.2 through 5.3

Description The issue allows local users in the system group to create or overwrite an arbitrary file and enable world writability of this file by using the file's name as the argument to the "-p" option in swcons.

Recommendations For IBM AIX versions 5.2 through 5.3, consider restricting access to the swcons command and the cfgcon utility to prevent unauthorized file creation or modification. As a temporary workaround, consider disabling the use of the "-p" option in swcons until a proper fix is available.

Correção

Identificadores relacionados

CVE-2007-5804

Produtos afetados

Ibm Aix

Referências · 9

• http://secunia.com/advisories/27437 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5804 · Nota de Segurança
• http://securityfocus.com/bid/26258 · Correção
• http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03055 · Aviso do Fabricante
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=611 · Nota
• http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200710%2FSECURITY%2F20071030%2Fdatafile100405 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38154 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03061 · Aviso do Fabricante
• ftp://aix.software.ibm.com/aix/efixes/security/cfgcon_ifix.tar · Correção