CVE-2007-4238: Medium severity IBM AIX vulnerability
Published Aug 8, 2007
·Updated
AIX 5.2 and 5.3 install pioinit with user and group ownership of bin, which allows local users with bin or possibly printq privileges to gain root privileges by modifying pioinit.
Affected Software
2 affected components
IBM AIX=5.3
IBM AIX=5.2
Event History
Aug 8, 2007
CVE Published
10:17 PM
Aug 9, 2007
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4238?
CVE-2007-4238 is considered a high severity vulnerability due to its potential for local users to gain root privileges.
2
How do I fix CVE-2007-4238?
To fix CVE-2007-4238, ensure that the ownership and permissions of pioinit are correctly set to prevent unauthorized access.
3
Which versions of IBM AIX are affected by CVE-2007-4238?
CVE-2007-4238 affects IBM AIX versions 5.2 and 5.3.
4
What type of users can exploit CVE-2007-4238?
Local users with bin or possibly printq privileges can exploit CVE-2007-4238 to gain root access.
5
Is there a workaround for CVE-2007-4238?
A recommended workaround for CVE-2007-4238 is to restrict access to the pioinit file to limit its modification.