Description
create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service.
References
- 5473 vdb-entry
- IY19069 vendor-advisory
- aix-keyfile-world-writable(8923) vdb-entry