Vulnerability in IBM Aix

CVE-2013-3005

The TFTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, when RBAC is enabled, allows remote authenticated users to bypass intended file-ownership restrictions, and read or overwrite arbitrary files, via unspecified vectors.

EPSS: 0.030 (85.8th percentile) — read the EPSS interpretation.

Affected products

  • Ibm Aix — versions 6.1, 7.1
  • Ibm Vios — versions 2.2.2.2
  • N/a — versions n/a

Weakness classification (CWE)

References