CVE-2009-0370

IBM AIX 5.2.0-6.1.2 - Unauthenticated Arbitrary File Write via rmsock and rmsock64

Title source: llm
STIX 2.1

Description

Multiple unspecified vulnerabilities in IBM AIX 5.2.0 through 6.1.2 allow local users to append data to arbitrary files, related to (1) rmsock and (2) rmsock64 not creating "secure log files."

References (11)

Core 11
Core References
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6028
Patch vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IZ42786
Patch vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IZ42787
Patch vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IZ42788
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/33522
Patch vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IZ41599
Various Sources vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IZ41593
Patch vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IZ40386
Patch vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IZ41510
Patch vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IZ42785

Scores

EPSS 0.0037
EPSS Percentile 29.3%

Details

Status published
Products (11)
ibm/aix 5.2
ibm/aix 5.2.2
ibm/aix 5.2_l
ibm/aix 5.3
ibm/aix 5.3.7
ibm/aix 5.3.8
ibm/aix 5.3.9
ibm/aix 5.3_l
ibm/aix 6.1
ibm/aix 6.1.1
... and 1 more
Published Jan 30, 2009
Tracked Since Feb 18, 2026