NVD

Id
49055  
Name
CVE-2009-1786  
Description
The malloc subsystem in libc in IBM AIX 5.3 and 6.1 allows local users to create or overwrite arbitrary files via a symlink attack on the log file associated with the MALLOCDEBUG environment variable.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-05-26  
Modified Date
2010-08-21  
Seq
2009-1786  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
248039 49055 CVE-2009-1786 http://aix.software.ibm.com/aix/efixes/security/libc_advisory.asc  View
248040 49055 CVE-2009-1786 20090520 IBM AIX libc MALLOCDEBUG File Overwrite Vulnerability  View
248041 49055 CVE-2009-1786 oval:org.mitre.oval:def:6276  View
248042 49055 CVE-2009-1786 1022261  View
248043 49055 CVE-2009-1786 IZ50121  View
248044 49055 CVE-2009-1786 IZ50129  View
248045 49055 CVE-2009-1786 IZ50139  View
248046 49055 CVE-2009-1786 IZ50445  View
248047 49055 CVE-2009-1786 IZ50447  View
248048 49055 CVE-2009-1786 IZ50500  View
248049 49055 CVE-2009-1786 IZ50517  View
248050 49055 CVE-2009-1786 9306  View
248051 49055 CVE-2009-1786 35034  View
248052 49055 CVE-2009-1786 ADV-2009-1380  View
248053 49055 CVE-2009-1786 aix-mallocdebug-privilege-escalation(50636)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40537 JVNDB-2009-001543 IBM AIX の malloc サブシステムにおけるシンボリックリンク攻撃の脆弱性 IBM AIX の libc にある malloc サブシステムには、MALLOCDEBUG 環境変数に関連するログファイルに関して、シンボリックリンク攻撃の脆弱性が存在します。 CVE-2009-1786 39217 CVE-2009-1786 49055 6.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001543.html 2009-05-26 2009-06-30 View