PT-2013-4089 · Ibm · Ibm Aix+1

Publicado

2013-07-06

·

Atualizado

2017-09-19

·

CVE-2013-3005

CVSS v2.0

8.5

Alta

VetorAV:N/AC:M/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions IBM AIX versions 6.1 and 7.1 VIOS version 2.2.2.2-FP-26 SP-02
Description The issue allows remote authenticated users to bypass intended file-ownership restrictions and read or overwrite arbitrary files when RBAC is enabled.
Recommendations For IBM AIX versions 6.1 and 7.1, consider disabling RBAC until a patch is available to prevent the bypass of file-ownership restrictions. For VIOS version 2.2.2.2-FP-26 SP-02, restrict access to sensitive files to minimize the risk of exploitation until a fix is applied.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-3005

Produtos afetados

Ibm Aix
Vios