CVE-2014-0899
IBM AIX 7.1.1-7.1.2 - Authenticated Arbitrary File Write via FTP Commands
Title source: llmDescription
ftpd in IBM AIX 7.1.1 before SP10 and 7.1.2 before SP5, when a Workload Partition (aka WPAR) for AIX 5.2 or 5.3 is used, allows remote authenticated users to bypass intended permission settings and modify arbitrary files via FTP commands.
References (4)
Core 4
Core References
Vendor Advisory x_refsource_confirm
http://aix.software.ibm.com/aix/efixes/security/wparcre_advisory.asc
Vendor Advisory vendor-advisory
x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IV51420
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/91396
Various Sources vendor-advisory
x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IV51421
Scores
EPSS
0.0187
EPSS Percentile
77.2%
Details
CWE
CWE-264
Status
published
Products (2)
ibm/aix
7.1.1
ibm/aix
7.1.2
Published
Mar 11, 2014
Tracked Since
Feb 18, 2026