CVE-2008-1596: High severity ibm aix vulnerability

Published Mar 31, 2008

Updated

Trusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the trustchkblockwrite function, which might allow local users to modify trusted files, related to missing checks in the TSDFILESLOCK policy for modifications performed via hard links, a different vulnerability than CVE-2007-6680.

Affected Software

3 affected components

IBM AIX=5.3

IBM AIX=5.2

IBM AIX=6.1

Remediation

Patch Available

http://www.securityfocus.com/bid/28467

Event History

Mar 31, 2008

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-1596?

CVE-2008-1596 is classified as a medium severity vulnerability due to its potential impact on trusted file modifications.

How do I fix CVE-2008-1596?

To fix CVE-2008-1596, ensure you apply the latest security patches and updates provided by IBM for AIX versions 5.2, 5.3, and 6.1.

Who is affected by CVE-2008-1596?

CVE-2008-1596 affects local users on systems running IBM AIX versions 5.2, 5.3, and 6.1.

What type of vulnerability is CVE-2008-1596?

CVE-2008-1596 is a local privilege escalation vulnerability that allows users to modify trusted files.

Can CVE-2008-1596 be exploited remotely?

No, CVE-2008-1596 can only be exploited by local users with access to the affected system.