The FTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly manage privileges in an RBAC environment, which allows attackers to bypass intended file-read restrictions by leveraging the setuid installation of the ftp executable file.
References
Configurations
Configuration 1 (hide)
|
History
31 Aug 2021, 15:43
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:ibm:vios:2.2.1.4:fp-25_sp-02:*:*:*:*:*:* |
Information
Published : 2012-10-20 10:41
Updated : 2024-02-04 18:16
NVD link : CVE-2012-4845
Mitre link : CVE-2012-4845
CVE.ORG link : CVE-2012-4845
JSON object : View
Products Affected
ibm
- vios
- aix
CWE
CWE-264
Permissions, Privileges, and Access Controls