NVD

Id
32050  
Name
CVE-2014-3977  
Description
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on a temporary file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2179.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-06-08  
Modified Date
2017-01-06  
Seq
2014-3977  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
168643 32050 CVE-2014-3977 http://aix.software.ibm.com/aix/efixes/security/libodm_advisory.asc  View
168644 32050 CVE-2014-3977 http://packetstormsecurity.com/files/127067/IBM-AIX-6.1.8-Privilege-Escalation.html  View
168645 32050 CVE-2014-3977 33725  View
168646 32050 CVE-2014-3977 IV60299  View
168647 32050 CVE-2014-3977 IV60303  View
168648 32050 CVE-2014-3977 IV60311  View
168649 32050 CVE-2014-3977 IV60312  View
168650 32050 CVE-2014-3977 IV60313  View
168651 32050 CVE-2014-3977 IV60314  View
168652 32050 CVE-2014-3977 1030401  View
168653 32050 CVE-2014-3977 aix-libodm-symlink(93595)  View
168654 32050 CVE-2014-3977 https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-3977/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13922 JVNDB-2014-002797 IBM AIX および VIOS の libodm.a における任意のファイルを上書きされる脆弱性 IBM AIX および VIOS の libodm.a における任意のファイルを上書きされる脆弱性が存在します。 CVE-2014-3977 71265 CVE-2014-3977 32050 6.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002797.html 2014-06-05 2014-06-10 View