CVE-2007-5805 — Link Following in IBM AIX

CWE-59 — Link Following6 documents3 sources
Severity
7.2HIGHNVD
NVD6.9CNA6.9
EPSS
0.0%
top 92.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM AIX
Timeline
PublishedNov 5
Latest updateMay 3

Description

cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an arbitrary file, and enable world writability of this file, via a symlink attack involving use of the file's name as the argument. NOTE: this issue is due to an incomplete fix for CVE-2007-5804.

CVSS vector

AV:L/AC:M/C:C/I:C/A:CExploitability: 3.4 | Impact: 10.0

Affected Packages1 packages

▶NVDibm/aix5.2, 5.3, 6.1+2

Patches

Patch: aix.software.ibm.com ↗Patch: www.securityfocus.com ↗Patch: www14.software.ibm.com ↗

🔴Vulnerability Details

4
GHSA
GHSA-m77g-9r5h-645w: cfgcon in IBM AIX 5↗2022-05-03
▶
GHSA
GHSA-6cm5-fvqr-8cxh: swcons in bos↗2022-05-02
▶
CVEList
CVE-2008-4018: swcons in bos↗2008-09-10
▶
CVEList
CVE-2007-5805: cfgcon in IBM AIX 5↗2007-11-05
▶
CVE-2007-5805 — Link Following in IBM AIX | cvebase