7 matches found
CVE-2007-5805
cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an arbitrary file, and enable world writability of this file, via a symlink attack involving use of the file's name as the argument. NOTE: thi...
Design/Logic Flaw
cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an arbitrary file, and enable world writability of this file, via a symlink attack involving use of the file's name as the argument. NOTE: thi...
CVE-2007-5804
cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create or overwrite an arbitrary file, and enable world writability of this file, by using the file's name as the argument...
CVE-2007-5805
cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an arbitrary file, and enable world writability of this file, via a symlink attack involving use of the file's name as the argument. NOTE: thi...
CVE-2007-5805
CVE-2007-5805 affects IBM AIX 5.2 and 5.3; the cfgcon component in swcons misvalidates the -p argument, allowing local users in the system group to create or overwrite an arbitrary file and make it world-writable via a symlink-name attack. This issue is tied to an incomplete fix for CVE-2007-5804...
CVE-2007-5804
cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create or overwrite an arbitrary file, and enable world writability of this file, by using the file's name as the argument...
CVE-2007-5804
CVE-2007-5804 concerns IBM AIX 5.2 and 5.3 where the cfgcon handling of the -p option for swcons does not properly validate the argument, permitting local users in the system group to create or overwrite an arbitrary file and make it world-writable by using the file name as the argument. The vuln...