CVE-2001-1079: Low severity IBM AIX vulnerability
createkeyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1079?
CVE-2001-1079 is considered a moderate severity vulnerability due to its potential for local denial of service.
How do I fix CVE-2001-1079?
To fix CVE-2001-1079, ensure that the keyfile directories created by create_keyfiles do not have world-writable permissions.
What are the potential impacts of CVE-2001-1079?
The potential impacts of CVE-2001-1079 include the ability for local users to delete key files, leading to service disruption.
Which versions of AIX are affected by CVE-2001-1079?
CVE-2001-1079 specifically affects IBM AIX version 3.2.0 with DCE 3.1 authentication.
Who is responsible for addressing CVE-2001-1079?
System administrators and users of affected IBM AIX systems should take responsibility for addressing CVE-2001-1079.