PT-2014-3931 · Ibm · Aix

Published 2014-03-11 · Updated 2017-08-29 · CVE-2014-0899

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.1.1 before SP10 IBM AIX versions 7.1.2 before SP5

Description The issue allows remote authenticated users to bypass intended permission settings and modify arbitrary files via FTP commands when a Workload Partition for AIX 5.2 or 5.3 is used.

Recommendations For IBM AIX version 7.1.1, update to at least SP10 to resolve the issue. For IBM AIX version 7.1.2, update to at least SP5 to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-0899

Affected Products

Aix

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2014-0899 · Security Note
• http://aix.software.ibm.com/aix/efixes/security/wparcre_advisory.asc · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=isg1IV51421 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=isg1IV51420 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/91396 · Note