|Category:||Access Control Error|
Published on 20/10/12 - Updated on 19/09/17
The FTP client in IBM AIX 6.1 and 7.1, and VIOS 188.8.131.52-FP-25 SP-02, does not properly manage privileges in an RBAC environment, which allows attackers to bypass intended file-read restrictions by leveraging the setuid installation of the ftp executable file.
CWE-264 (Permissions, Privileges, and Access Control)
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
No exploits available for this CVE in our database.