PT-2007-5431 · Ibm · Aix

Published 2007-08-08 · Updated 2011-03-08 · CVE-2007-4238

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AIX versions 5.2 through 5.3

Description The issue allows local users with certain privileges to gain root privileges by modifying the pioinit file, which is installed with user and group ownership of bin.

Recommendations For AIX versions 5.2 through 5.3, consider changing the ownership of the pioinit file to prevent local users from modifying it and gaining root privileges.

Fix

Related Identifiers

CVE-2007-4238

Affected Products

Aix

References · 7

• http://www-1.ibm.com/support/docview.wss?uid=isg1IY79785 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-4238 · Security Note
• http://www-1.ibm.com/support/docview.wss?uid=isg1IY79786 · Vendor Advisory
• http://osvdb.org/36782 · Note
• http://vupen.com/english/advisories/2007/2678 · Note
• http://secunia.com/advisories/26219 · Note
• http://securitytracker.com/id?1018468 · Note