13 matches found
Code injection
lscfg in IBM AIX 5.2 and 5.3 allows local users to modify arbitrary files via a symlink attack...
CVE-2006-0667
lscfg in IBM AIX 5.2 and 5.3 allows local users to modify arbitrary files via a symlink attack...
CVE-2006-0667
The CVE-2006-0667 issue affects IBM AIX 5.2 and 5.3 where the lscfg utility allows local users to modify arbitrary files through a symlink attack. The impact is a local privilege concern (partial confidentiality, integrity, and availability) as described by the vulnerability entry. The connected ...
CVE-2006-0667: Undefined Security Weakness
lscfg in IBM AIX 5.2 and 5.3 allows local users to modify arbitrary files via a symlink attack...
CVE-2005-3289
LSCFG in IBM AIX 5.2 and 5.3 does not create temporary files securely, which allows local users to corrupt /etc/passwd and possibly other system files via the trace file...
CVE-2005-3289
LSCFG in IBM AIX 5.2 and 5.3 does not create temporary files securely, which allows local users to corrupt /etc/passwd and possibly other system files via the trace file...
CVE-2005-3289
CVE-2005-3289 affects IBM AIX 5.2 and 5.3 where LSCFG fails to securely create temporary files, enabling local users to corrupt /etc/passwd and possibly other system files via the trace file. Connected sources corroborate the binary-level description but do not provide explicit patch/version reme...
CVE-2005-3289: Undefined Security Weakness
LSCFG in IBM AIX 5.2 and 5.3 does not create temporary files securely, which allows local users to corrupt /etc/passwd and possibly other system files via the trace file...
AIX lscfg symbolic links problem
No description provided...
[SA17202] AIX LSCFG Insecure Temporary File Handling Vulnerability
TITLE: AIX LSCFG Insecure Temporary File Handling Vulnerability SECUNIA ADVISORY ID: SA17202 VERIFY ADVISORY: http://secunia.com/advisories/17202/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: A...
CVE-2002-1686
Technical details for CVE-2002-1686 are not publicly available in the provided documents; no affected product/version or impact is disclosed. Monitor for updates.