CVE-2012-4845: Medium severity IBM VIOS vulnerability

Published Oct 20, 2012

Updated

The FTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly manage privileges in an RBAC environment, which allows attackers to bypass intended file-read restrictions by leveraging the setuid installation of the ftp executable file.

Affected Software

3 affected components

IBM VIOS=2.2.1.4-fp-25_sp-02

IBM AIX=6.1

IBM AIX=7.1

Event History

Oct 20, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-4845?

CVE-2012-4845 is considered a medium severity vulnerability due to the potential for unauthorized file access by attackers.

How do I fix CVE-2012-4845?

To fix CVE-2012-4845, apply the latest security patches provided by IBM for AIX 6.1, AIX 7.1, and VIOS systems.

What systems are affected by CVE-2012-4845?

CVE-2012-4845 affects IBM AIX 6.1, IBM AIX 7.1, and IBM VIOS 2.2.1.4-FP-25 SP-02.

Can CVE-2012-4845 lead to data breaches?

Yes, CVE-2012-4845 can potentially lead to data breaches as attackers may bypass file-read restrictions.

What is the exploit method for CVE-2012-4845?

The exploit method for CVE-2012-4845 involves leveraging the setuid installation of the ftp executable file to bypass intended restrictions.