CVEvulnerability
CVE-2007-5804
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-11-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Description
cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create or overwrite an arbitrary file, and enable world writability of this file, by using the file's name as the argument.
Affected configurations
• ibm aix 5.2
• ibm aix 5.3
References
- ftp://aix.software.ibm.com/aix/efixes/security/cfgcon_ifix.tar Patch
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=611 labs.idefense.com
- http://secunia.com/advisories/27437 secunia.com
- http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03055 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03061 www-1.ibm.com
- http://www.securityfocus.com/bid/26258 Patch
- http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200710%2FSECURITY%2F20071030%2Fdatafile100405 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38154 exchange.xforce.ibmcloud.com
- ftp://aix.software.ibm.com/aix/efixes/security/cfgcon_ifix.tar Patch
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=611 labs.idefense.com
- http://secunia.com/advisories/27437 secunia.com
- http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03055 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03061 www-1.ibm.com
- http://www.securityfocus.com/bid/26258 Patch
- http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200710%2FSECURITY%2F20071030%2Fdatafile100405 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38154 exchange.xforce.ibmcloud.com