Description
The TFTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, when RBAC is enabled, allows remote authenticated users to bypass intended file-ownership restrictions, and read or overwrite arbitrary files, via unspecified vectors.
References
- http://aix.software.ibm.com/aix/efixes/security/tftp_advisory.asc
- aix-cve20133005-file-overwrite(85366) vdb-entry
- IV42935 vendor-advisory
- IV42934 vendor-advisory
- IV40221 vendor-advisory
- IV42932 vendor-advisory
- IV42933 vendor-advisory
- oval:org.mitre.oval:def:19519 vdb-entry signature
- IV42700 vendor-advisory