CVE-2007-4798: Medium severity IBM AIX vulnerability
Published Sep 10, 2007
·Updated
Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final substring of a hostname alias, as demonstrated by hostnames ending in "unix".
Affected Software
2 affected components
IBM AIX=5.3
IBM AIX=5.2
Remediation
Patch Available
Patch Available
Patch Available
Event History
Sep 10, 2007
CVE Published
09:17 PM
Sep 11, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4798?
CVE-2007-4798 is a local vulnerability with significant implications for system integrity.
2
How do I fix CVE-2007-4798?
To remediate CVE-2007-4798, apply the latest security patches provided by IBM for AIX 5.2 and 5.3.
3
Who is affected by CVE-2007-4798?
CVE-2007-4798 affects local users of IBM AIX versions 5.2 and 5.3.
4
What can attackers do with CVE-2007-4798?
Attackers can exploit CVE-2007-4798 to delete important system files based on hostname aliases.
5
Is there a way to mitigate CVE-2007-4798 if I can't update?
Without updating, restricting local user permissions and monitoring file deletions can help mitigate CVE-2007-4798.