CVE-2007-5804: Medium severity IBM AIX vulnerability
cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create or overwrite an arbitrary file, and enable world writability of this file, by using the file's name as the argument.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5804?
CVE-2007-5804 is considered a high severity vulnerability due to its potential for local users to manipulate system files.
How do I fix CVE-2007-5804?
To fix CVE-2007-5804, it is recommended to apply the latest patches provided by IBM for AIX 5.2 and 5.3.
Who is affected by CVE-2007-5804?
CVE-2007-5804 affects local users in the system group on IBM AIX versions 5.2 and 5.3.
What type of vulnerability is CVE-2007-5804?
CVE-2007-5804 is a local privilege escalation vulnerability that allows users to overwrite arbitrary files.
Can CVE-2007-5804 enable unauthorized file modifications?
Yes, CVE-2007-5804 allows local users to create or overwrite files, potentially leading to unauthorized modifications.