CVE

Id
29161  
CVE No.
CVE-2007-5804  
Status
Candidate  
Description
cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create or overwrite an arbitrary file, and enable world writability of this file, by using the file"s name as the argument.  
Phase
Assigned (20071105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
305927 29161 CVE-2007-5804 IDEFENSE:20071030 IBM AIX swcons Local Arbitrary File Access Vulnerability  View
305928 29161 CVE-2007-5804 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=611  View
305929 29161 CVE-2007-5804 CONFIRM:ftp://aix.software.ibm.com/aix/efixes/security/cfgcon_ifix.tar  View
305930 29161 CVE-2007-5804 CONFIRM:http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200710%2FSECURITY%2F20071030%2Fdatafile100405  View
305931 29161 CVE-2007-5804 AIXAPAR:IZ03055  View
305932 29161 CVE-2007-5804 URL:http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03055  View
305933 29161 CVE-2007-5804 AIXAPAR:IZ03061  View
305934 29161 CVE-2007-5804 URL:http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03061  View
305935 29161 CVE-2007-5804 BID:26258  View
305936 29161 CVE-2007-5804 URL:http://www.securityfocus.com/bid/26258  View
305937 29161 CVE-2007-5804 SECUNIA:27437  View
305938 29161 CVE-2007-5804 URL:http://secunia.com/advisories/27437  View
305939 29161 CVE-2007-5804 XF:aix-swcons-insecure-permissions(38154)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55908 JVNDB-2007-004600 ILIAS の Services/Utilities/classes/class.ilUtil.php におけるクロスサイトスクリプティングの脆弱性 ILIAS の Services/Utilities/classes/class.ilUtil.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-5806 29161 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004600.html  View