PT-2014-3931 · Ibm · Aix

Publicado 2014-03-11 · Atualizado 2017-08-29 · CVE-2014-0899

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.1.1 before SP10 IBM AIX versions 7.1.2 before SP5

Description The issue allows remote authenticated users to bypass intended permission settings and modify arbitrary files via FTP commands when a Workload Partition for AIX 5.2 or 5.3 is used.

Recommendations For IBM AIX version 7.1.1, update to at least SP10 to resolve the issue. For IBM AIX version 7.1.2, update to at least SP5 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-0899

Produtos afetados

Aix

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2014-0899 · Nota de Segurança
• http://aix.software.ibm.com/aix/efixes/security/wparcre_advisory.asc · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=isg1IV51421 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/91396 · Nota
• http://ibm.com/support/docview.wss?uid=isg1IV51420 · Aviso do Fabricante