PT-2005-2192 · Ibm · Aix+1

Published 2005-04-19 · Updated 2017-07-11 · CVE-2005-1176

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Low

Base vector

AV:L/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions JFS2 on AIX versions 5.2 through 5.3

Description A race condition issue exists when deleting a file while I/O operations are still in progress for that file. This may result in writing data to a different file, potentially leading to the leakage of sensitive information.

Recommendations For AIX versions 5.2 and 5.3, ensure that all I/O operations are completed before deleting a file to prevent potential data leakage. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-1176

Affected Products

Aix

Jfs2

References · 4

• http://www-1.ibm.com/support/search.wss?rs=0&q=IY70034&apar=only · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1176 · Security Note
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY70032&apar=only · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20604 · Note