CVE-2012-4845

Loading...

General

Score:6.8/10.0
Severity:Medium
Category:Access Control Error

Impact Metrics

Confidentiality:Complete
Integrity:None
Availability:None

Exploitability Metrics

Access Vector:Network
Access Complexity:Low
Authentication:Single

Published on 20/10/12 - Updated on 19/09/17

Description

The FTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly manage privileges in an RBAC environment, which allows attackers to bypass intended file-read restrictions by leveraging the setuid installation of the ftp executable file.

Category: Access Control Error

CWE-264 (Permissions, Privileges, and Access Control)
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Security Notices

US National Vulnerability DatabaseCVE-2012-4845
Agence Nationale de la Sécurité des Systèmes d'Information CERTA-2012-AVI-597

Exploits

No exploits available for this CVE in our database.

Relative technologies

VendorProduct
ibmaix
ibmvios

Share this vulnerability with:

Twitter Facebook LinkedIn Mail