Description
The (1) bos.rte.serv_aid or (2) bos.rte.console filesets in IBM AIX 5.1 and 5.2 allow local users to overwrite arbitrary files via a symlink attack on temporary files via unknown attack vectors.
References
- 5711 vdb-entry
- 5712 vdb-entry
- 11496 third-party-advisory
- 10231 vdb-entry
- https://techsupport.services.ibm.com/server/pseries.subscriptionSvcs?mode=18&ID=279
- aix-console-commands-symlink(16008) vdb-entry
- IY55790 vendor-advisory
- IY55789 vendor-advisory
- 1009975 vdb-entry