VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 11, 2008· Updated Jun 16, 2026

CVE-2008-4018

CVE-2008-4018

Description

swcons in bos.rte.console in IBM AIX 5.2.0 through 6.1.1 allows local users in the system group to create or overwrite an arbitrary file, and establish weak permissions and root ownership for this file, via unspecified vectors. NOTE: this can be leveraged to gain privileges. NOTE: this issue exists because of an incomplete fix for CVE-2007-5805.

Affected products

5
  • IBM/Aix4 versions
    cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*
    • cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*
    • cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*
    • (no CPE)range: 5.2.0 through 6.1.1
  • IBM/bos.rte.consolellm-create
    Range: 5.2.0 through 6.1.1

Patches

Vulnerability mechanics

References

13

News mentions

0

No linked articles in our index yet.