NVD

Id
3880  
Name
CVE-2008-4018  
Description
swcons in bos.rte.console in IBM AIX 5.2.0 through 6.1.1 allows local users in the system group to create or overwrite an arbitrary file, and establish weak permissions and root ownership for this file, via unspecified vectors. NOTE: this can be leveraged to gain privileges. NOTE: this issue exists because of an incomplete fix for CVE-2007-5805.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-09-10  
Modified Date
2011-03-07  
Seq
2008-4018  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
24474 3880 CVE-2008-4018 http://aix.software.ibm.com/aix/efixes/security/swcons_advisory.asc  View
24475 3880 CVE-2008-4018 oval:org.mitre.oval:def:5932  View
24476 3880 CVE-2008-4018 1020818  View
24477 3880 CVE-2008-4018 IZ18334  View
24478 3880 CVE-2008-4018 IZ18335  View
24479 3880 CVE-2008-4018 IZ18338  View
24480 3880 CVE-2008-4018 IZ18339  View
24481 3880 CVE-2008-4018 IZ18341  View
24482 3880 CVE-2008-4018 IZ28943  View
24483 3880 CVE-2008-4018 30999  View
24484 3880 CVE-2008-4018 ADV-2008-2490  View
24485 3880 CVE-2008-4018 ibm-aix-swcons-code-execution(44903)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46367 JVNDB-2008-001677 IBM AIX の swcons における root が所有者となる任意のファイルを作成または上書きされる脆弱性 IBM AIX の bos.rte.console における swcons には任意のファイルの作成または上書きし、そのファイルを root 所有にできる脆弱性が存在します。 CVE-2008-4018 34131 CVE-2008-4018 3880 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001677.html 2008-09-03 2008-09-26 View