swcons in bos.rte.console in IBM AIX 5.2.0 through 6.1.1 allows local users in the system group to create or overwrite an arbitrary file, and establish weak permissions and root ownership for this file, via unspecified vectors. NOTE: this can be leveraged to gain privileges. NOTE: this issue exists because of an incomplete fix for CVE-2007-5805.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:50
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://aix.software.ibm.com/aix/efixes/security/swcons_advisory.asc - | |
| References | () http://secunia.com/advisories/31739 - | |
| References | () http://securitytracker.com/id?1020818 - | |
| References | () http://www.ibm.com/support/docview.wss?uid=isg1IZ18334 - | |
| References | () http://www.ibm.com/support/docview.wss?uid=isg1IZ18335 - | |
| References | () http://www.ibm.com/support/docview.wss?uid=isg1IZ18338 - | |
| References | () http://www.ibm.com/support/docview.wss?uid=isg1IZ18339 - | |
| References | () http://www.ibm.com/support/docview.wss?uid=isg1IZ18341 - | |
| References | () http://www.ibm.com/support/docview.wss?uid=isg1IZ28943 - | |
| References | () http://www.securityfocus.com/bid/30999 - | |
| References | () http://www.vupen.com/english/advisories/2008/2490 - | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/44903 - | |
| References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5932 - |
Information
Published : 2008-09-11 01:13
Updated : 2024-11-21 00:50
NVD link : CVE-2008-4018
Mitre link : CVE-2008-4018
CVE.ORG link : CVE-2008-4018
JSON object : View
Products Affected
ibm
- aix
CWE
CWE-264
Permissions, Privileges, and Access Controls