Vulnerability in Ibm Aix

CVE-2014-3977

libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on a temporary file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2179.

EPSS: 0.009 (55.2th percentile) — read the EPSS interpretation.

Affected products

Ibm Aix — versions 6.1, 7.1
Ibm Vios — versions 2.2.0.10, 2.2.0.11, 2.2.0.12
N/a — versions n/a

Weakness classification (CWE)

CWE-59 — Improper Link Resolution Before File Access

References

cve@mitre.org (vendor-advisory, x_refsource_AIXAPAR)
cve@mitre.org (vendor-advisory, x_refsource_AIXAPAR)
cve@mitre.org (vendor-advisory, x_refsource_AIXAPAR)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (vendor-advisory, x_refsource_AIXAPAR)
cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (vendor-advisory, x_refsource_AIXAPAR)