CVEvulnerability
CVE-2007-4238
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-08-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Description
AIX 5.2 and 5.3 install pioinit with user and group ownership of bin, which allows local users with bin or possibly printq privileges to gain root privileges by modifying pioinit.
Affected configurations
• ibm aix 5.2
• ibm aix 5.3
Related
Referenced by CWE · observed example (1)
- CWE-708 Incorrect Ownership Assignment weakness
References
- http://osvdb.org/36782 osvdb.org
- http://secunia.com/advisories/26219 secunia.com
- http://securitytracker.com/id?1018468 securitytracker.com
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY79785 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY79786 www-1.ibm.com
- http://www.vupen.com/english/advisories/2007/2678 www.vupen.com
- http://osvdb.org/36782 osvdb.org
- http://secunia.com/advisories/26219 secunia.com
- http://securitytracker.com/id?1018468 securitytracker.com
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY79785 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY79786 www-1.ibm.com
- http://www.vupen.com/english/advisories/2007/2678 www.vupen.com