{"id":"CVE-2007-5805","published":"2007-11-05T17:00:00Z","modified":"2024-08-07T15:47:00Z","title":"cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the \"-p\" option to swcons, which allows local…","vendor":null,"product":null,"tier":"tail","description":{"text":"cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the \"-p\" option to swcons, which allows local users in the system group to create an arbitrary file, and enable world writability of this file, via a symlink attack involving use of the file's name as the argument.  NOTE: this issue is due to an incomplete fix for CVE-2007-5804.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00306,"percentile":0.23378,"provenance":"source"},"cwes":[],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38154","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://secunia.com/advisories/27437","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securityfocus.com/bid/26258","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03055","tags":["vendor-advisory","x_refsource_AIXAPAR"]},{"url":"ftp://aix.software.ibm.com/aix/efixes/security/cfgcon_ifix.tar","tags":["x_refsource_CONFIRM"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03061","tags":["vendor-advisory","x_refsource_AIXAPAR"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=611","tags":["third-party-advisory","x_refsource_IDEFENSE"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200710%2FSECURITY%2F20071030%2Fdatafile100405","tags":["x_refsource_CONFIRM"]}],"priority":{"score":4.7,"factors":[{"name":"EPSS percentile","points":4.68}]},"euvd":{"id":"EUVD-2007-5775","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2007-5804-family-cve-2007-5804","parents":[{"from":"CVE-2007-5804","to":"CVE-2007-5805","relation":"incomplete-fix","confidence":"high","kind":"lineage","orderedBy":"description","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this issue is due to an incomplete fix for CVE-2007-5804.","from":"CVE.org","in":"CVE-2007-5805"}]}],"children":[{"from":"CVE-2007-5805","to":"CVE-2008-4018","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this issue exists because of an incomplete fix for CVE-2007-5805.","from":"CVE.org","in":"CVE-2008-4018"}]}]}}