PT-2012-3876 · Ibm · Aix+2

Publicado 2012-06-27 · Atualizado 2021-08-31 · CVE-2012-2200

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions sendmail in IBM AIX versions 6.1 through 7.1 sendmail in VIOS version 2.2.1.4-FP-25 SP-02

Description The default configuration of sendmail allows local users to gain privileges by entering a command in a .forward file in a home directory.

Recommendations For sendmail in IBM AIX versions 6.1 through 7.1, consider restricting access to the .forward file to prevent local users from gaining privileges. For sendmail in VIOS version 2.2.1.4-FP-25 SP-02, consider restricting access to the .forward file to prevent local users from gaining privileges. As a temporary workaround, consider disabling the use of .forward files in home directories until a patch is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-2200

Produtos afetados

Aix

Vios

Sendmail

Referências · 9

• http://ibm.com/support/docview.wss?uid=isg1IV22964 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/76466 · Nota
• http://aix.software.ibm.com/aix/efixes/security/sendmail1_advisory.asc · Aviso do Fabricante
• https://t.me/cvenotify/20436 · Publicação no Telegram
• http://ibm.com/support/docview.wss?uid=isg1IV22965 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=isg1IV22963 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-2200 · Nota de Segurança
• http://ibm.com/support/docview.wss?uid=isg1IV22966 · Aviso do Fabricante
• http://securitytracker.com/id?1027207 · Nota