CVE-2007-5805

cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an…

published November 5, 2007

CVSS
—
EPSS
0%
Percentile
22.2
In the wild
Unconfirmed
What it is

cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an arbitrary file, and enable world writability of this file, via a symlink attack involving use of the file's name as the argument. NOTE: this issue is due to an incomplete fix for CVE-2007-5804.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00306 · 22.2th percentile
Published
2007-11-05T17:00Z
EPSS history
Timeline
  • 05 NOV 17:00Z
    cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an…
    cvelistv5