Lucene search

K
cveIbmCVE-2012-2179
HistoryJun 22, 2012 - 10:24 a.m.

CVE-2012-2179

2012-06-2210:24:07
CWE-264
ibm
web.nvd.nist.gov
40
3
ibm aix
cve-2012-2179
libodm.a
symlink attack
nvd

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

5.8

Confidence

Low

EPSS

0

Percentile

5.1%

libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.

Affected configurations

Nvd
Node
ibmaixMatch5.3
OR
ibmaixMatch6.1
OR
ibmaixMatch7.1
VendorProductVersionCPE
ibmaix5.3cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*
ibmaix6.1cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*
ibmaix7.1cpe:2.3:o:ibm:aix:7.1:*:*:*:*:*:*:*

Social References

More

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

5.8

Confidence

Low

EPSS

0

Percentile

5.1%