medium6.9Public exploit code
CVE-2012-2179
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM AIX 6.1.8 - 'libodm' Arbitrary File Write2014-06-12 · local · aix · Verified
Impact
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Aix | Versions 5.3, 6.1, 7.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://aix.software.ibm.com/aix/efixes/security/libodm_advisory.asc
- http://www.ibm.com/support/docview.wss?uid=isg1IV21379
- http://www.ibm.com/support/docview.wss?uid=isg1IV21381
- http://www.ibm.com/support/docview.wss?uid=isg1IV21382
- http://www.ibm.com/support/docview.wss?uid=isg1IV21383
- http://www.ibm.com/support/docview.wss?uid=isg1IV22019
- http://www.osvdb.org/83133
- http://www.securitytracker.com/id?1027193
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75510
- http://aix.software.ibm.com/aix/efixes/security/libodm_advisory.asc
- http://www.ibm.com/support/docview.wss?uid=isg1IV21379
- http://www.ibm.com/support/docview.wss?uid=isg1IV21381
- http://www.ibm.com/support/docview.wss?uid=isg1IV21382
- http://www.ibm.com/support/docview.wss?uid=isg1IV21383
- http://www.ibm.com/support/docview.wss?uid=isg1IV22019
- http://www.osvdb.org/83133
- http://www.securitytracker.com/id?1027193
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75510