CVEvulnerability
CVE-2008-4018
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-09-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
swcons in bos.rte.console in IBM AIX 5.2.0 through 6.1.1 allows local users in the system group to create or overwrite an arbitrary file, and establish weak permissions and root ownership for this file, via unspecified vectors. NOTE: this can be leveraged to gain privileges. NOTE: this issue exists because of an incomplete fix for CVE-2007-5805.
Affected configurations
• ibm aix 5.2
• ibm aix 5.3
• ibm aix 6.1
Related
Weakness · not in database (1)
References
- http://aix.software.ibm.com/aix/efixes/security/swcons_advisory.asc aix.software.ibm.com
- http://secunia.com/advisories/31739 secunia.com
- http://securitytracker.com/id?1020818 securitytracker.com
- http://www.ibm.com/support/docview.wss?uid=isg1IZ18334 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IZ18335 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IZ18338 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IZ18339 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IZ18341 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IZ28943 www.ibm.com
- http://www.securityfocus.com/bid/30999 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/2490 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44903 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5932 oval.cisecurity.org
- http://aix.software.ibm.com/aix/efixes/security/swcons_advisory.asc aix.software.ibm.com
- http://secunia.com/advisories/31739 secunia.com
- http://securitytracker.com/id?1020818 securitytracker.com
- http://www.ibm.com/support/docview.wss?uid=isg1IZ18334 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IZ18335 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IZ18338 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IZ18339 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IZ18341 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IZ28943 www.ibm.com
- http://www.securityfocus.com/bid/30999 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/2490 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44903 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5932 oval.cisecurity.org