Ibm aix Temporary File Creation Vulnerability

Ibm aix Temporary File Creation Vulnerability

Release date:
Updated on:

Affected Systems:
Ibm aix 7.1
Ibm aix 6.1
Ibm aix 5.3
Description:
--------------------------------------------------------------------------------
Bugtraq id: 54122
Cve id: CVE-2012-2179

AIX is an open standard UNIX operating system that provides you with an enterprise information technology infrastructure.

Libodm. a in ibm aix 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files through symbolic links on temporary files, resulting in DOS or privilege escalation.

<* Source: IBM (ncsupp@ca.ibm.com)
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

IBM
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.ers.ibm.com/