Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-3977
HistoryJun 08, 2014 - 11:55 p.m.

CVE-2014-3977

2014-06-0823:55:04
CWE-59
[email protected]
web.nvd.nist.gov
3

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

5.9

Confidence

Low

EPSS

0

Percentile

5.1%

JSON

libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on a temporary file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2179.

Affected configurations

Nvd
Node
ibmviosMatch2.2.0.10
OR
ibmviosMatch2.2.0.11
OR
ibmviosMatch2.2.0.12
OR
ibmviosMatch2.2.0.13
OR
ibmviosMatch2.2.1.0
OR
ibmviosMatch2.2.1.1
OR
ibmviosMatch2.2.1.3
OR
ibmviosMatch2.2.1.4
OR
ibmviosMatch2.2.1.4fp-25_sp-02
OR
ibmviosMatch2.2.1.8
OR
ibmviosMatch2.2.1.9
OR
ibmviosMatch2.2.2.0
OR
ibmviosMatch2.2.2.4
OR
ibmviosMatch2.2.2.5
OR
ibmviosMatch2.2.3.0
OR
ibmviosMatch2.2.3.2
OR
ibmviosMatch2.2.3.3
OR
ibmaixMatch6.1
OR
ibmaixMatch7.1
VendorProductVersionCPE
ibmvios2.2.0.10cpe:2.3:a:ibm:vios:2.2.0.10:*:*:*:*:*:*:*
ibmvios2.2.0.11cpe:2.3:a:ibm:vios:2.2.0.11:*:*:*:*:*:*:*
ibmvios2.2.0.12cpe:2.3:a:ibm:vios:2.2.0.12:*:*:*:*:*:*:*
ibmvios2.2.0.13cpe:2.3:a:ibm:vios:2.2.0.13:*:*:*:*:*:*:*
ibmvios2.2.1.0cpe:2.3:a:ibm:vios:2.2.1.0:*:*:*:*:*:*:*
ibmvios2.2.1.1cpe:2.3:a:ibm:vios:2.2.1.1:*:*:*:*:*:*:*
ibmvios2.2.1.3cpe:2.3:a:ibm:vios:2.2.1.3:*:*:*:*:*:*:*
ibmvios2.2.1.4cpe:2.3:a:ibm:vios:2.2.1.4:*:*:*:*:*:*:*
ibmvios2.2.1.4cpe:2.3:a:ibm:vios:2.2.1.4:fp-25_sp-02:*:*:*:*:*:*
ibmvios2.2.1.8cpe:2.3:a:ibm:vios:2.2.1.8:*:*:*:*:*:*:*
Rows per page:
1-10 of 191

Related

attackerkb 1
nessus 20
packetstorm 1
zdt 1
aix 1
exploitdb 1
seebug 1
cve 2
exploitpack 1
securityvulns 2
prion 2
cvelist 2
nvd 1
attackerkb
attackerkb
CVE-2014-3977
2014-06-08 00:00:00
nessus
nessus
AIX 7.1 TL 2 : bos.rte.odm (U865302)
2014-08-26 00:00:00
AIX 7.1 TL 1 : bos.rte.odm (U860787)
2014-08-26 00:00:00
AIX 6.1 TL 8 : bos.rte.odm (U865667)
2014-08-28 00:00:00
packetstorm
packetstorm
IBM AIX 6.1.8+ Privilege Escalation
2014-06-12 00:00:00
zdt
zdt
IBM AIX 6.1.8 libodm - Arbitrary File Write
2014-06-13 00:00:00
aix
aix
Arbitary file overwrite symlink in libodm
2012-06-20 13:00:02
exploitdb
exploitdb
IBM AIX 6.1.8 - 'libodm' Arbitrary File Write
2014-06-12 00:00:00
seebug
seebug
IBM AIX 6.1.8 libodm - Arbitrary File Write
2014-07-01 00:00:00
cve
cve
CVE-2014-3977
2014-06-08 23:55:04
CVE-2012-2179
2012-06-22 10:24:07
exploitpack
exploitpack
IBM AIX 6.1.8 - libodm Arbitrary File Write
2014-06-12 00:00:00
securityvulns
securityvulns
CVE-2014-3977 - Privilege Escalation in IBM AIX
2014-06-13 00:00:00
IBM AIX privilege escalation
2014-06-13 00:00:00
prion
prion
Design/Logic Flaw
2014-06-08 23:55:00
Arbitrary file deletion
2012-06-22 10:24:00
cvelist
cvelist
CVE-2014-3977
2014-06-08 23:00:00
CVE-2012-2179
2012-06-22 10:00:00
nvd
nvd
CVE-2012-2179
2012-06-22 10:24:07

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

5.9

Confidence

Low

EPSS

0

Percentile

5.1%

JSON
Related for NVD:CVE-2014-3977
attackerkb1nessus20packetstorm1zdt1aix1exploitdb1seebug1cve2exploitpack1securityvulns2prion2cvelist2nvd1