CVE

Id
62952  
CVE No.
CVE-2013-3005  
Status
Candidate  
Description
The TFTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, when RBAC is enabled, allows remote authenticated users to bypass intended file-ownership restrictions, and read or overwrite arbitrary files, via unspecified vectors.  
Phase
Assigned (20130412)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
627528 62952 CVE-2013-3005 CONFIRM:http://aix.software.ibm.com/aix/efixes/security/tftp_advisory.asc  View
627529 62952 CVE-2013-3005 AIXAPAR:IV40221  View
627530 62952 CVE-2013-3005 URL:http://www.ibm.com/support/docview.wss?uid=isg1IV40221  View
627531 62952 CVE-2013-3005 AIXAPAR:IV42700  View
627532 62952 CVE-2013-3005 URL:http://www.ibm.com/support/docview.wss?uid=isg1IV42700  View
627533 62952 CVE-2013-3005 AIXAPAR:IV42932  View
627534 62952 CVE-2013-3005 URL:http://www.ibm.com/support/docview.wss?uid=isg1IV42932  View
627535 62952 CVE-2013-3005 AIXAPAR:IV42933  View
627536 62952 CVE-2013-3005 URL:http://www.ibm.com/support/docview.wss?uid=isg1IV42933  View
627537 62952 CVE-2013-3005 AIXAPAR:IV42934  View
627538 62952 CVE-2013-3005 URL:http://www.ibm.com/support/docview.wss?uid=isg1IV42934  View
627539 62952 CVE-2013-3005 AIXAPAR:IV42935  View
627540 62952 CVE-2013-3005 URL:http://www.ibm.com/support/docview.wss?uid=isg1IV42935  View
627541 62952 CVE-2013-3005 OVAL:oval:org.mitre.oval:def:19519  View
627542 62952 CVE-2013-3005 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19519  View
627543 62952 CVE-2013-3005 XF:aix-cve20133005-file-overwrite(85366)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21927 JVNDB-2013-003502 IBM Java の Java Runtime Environment における脆弱性 IBM Java の Java Runtime Environment (JRE) には、機密性、可用性、および完全性に影響のある脆弱性が存在します。 CVE-2013-3010 62952 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003502.html  View