CVE-2007-5805

N/A Unknown
Published: November 05, 2007 Modified: April 23, 2026
View on NVD

Description

cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an arbitrary file, and enable world writability of this file, via a symlink attack involving use of the file's name as the argument. NOTE: this issue is due to an incomplete fix for CVE-2007-5804.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
ftp://aix.software.ibm.com/aix/efixes/security/cfgcon_ifix.tar
Source: cve@mitre.org
Patch
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=611
Source: cve@mitre.org
http://secunia.com/advisories/27437
Source: cve@mitre.org
http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03055
Source: cve@mitre.org
http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03061
Source: cve@mitre.org
http://www.securityfocus.com/bid/26258
Source: cve@mitre.org
Patch
http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200710%2FSECURITY%2F20071030%2Fdatafile100405
Source: cve@mitre.org
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/38154
Source: cve@mitre.org
ftp://aix.software.ibm.com/aix/efixes/security/cfgcon_ifix.tar
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=611
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/27437
Source: af854a3a-2127-422b-91ae-364da2661108
http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03055
Source: af854a3a-2127-422b-91ae-364da2661108
http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03061
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/26258
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200710%2FSECURITY%2F20071030%2Fdatafile100405
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/38154
Source: af854a3a-2127-422b-91ae-364da2661108

16 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
0.3%
22th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-59

Affected Vendors

ibm

Related CVEs

CVE-2026-9699 6.8
CVE-2026-57667 8.5
CVE-2026-57665 5.3
CVE-2026-57664 4.3
CVE-2026-57663 8.5