CVE-2013-3005 in AIX
Summary
The TFTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, when RBAC is enabled, allows remote authenticated users to bypass intended file-ownership restrictions, and read or overwrite arbitrary files, via unspecified vectors.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
04/12/2013
Disclosure
07/06/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 9339 | IBM AIX tftp Client access control | 264 | Unproven | Official fix | CVE-2013-3005 |