PT-2005-4100 · Ibm · Aix

Published 2005-10-23 · Updated 2008-09-05 · CVE-2005-3289

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.2 through 5.3

Description The issue allows local users to corrupt system files, including /etc/passwd, by exploiting insecure temporary file creation in LSCFG. This can potentially lead to system compromise.

Recommendations For IBM AIX versions 5.2 through 5.3, consider restricting access to LSCFG to minimize the risk of exploitation until a secure method of temporary file creation is implemented.

Fix

Related Identifiers

CVE-2005-3289

Affected Products

Aix

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-3289 · Security Note
• http://www-1.ibm.com/support/docview.wss?uid=isg1IY77624 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=isg1IY77638 · Vendor Advisory
• http://secunia.com/advisories/17202 · Note
• http://securityfocus.com/bid/15105 · Note
• http://securitytracker.com/id?1015061 · Note