CVE-2004-2634

medium

Description

The (1) bos.rte.serv_aid or (2) bos.rte.console filesets in IBM AIX 5.1 and 5.2 allow local users to overwrite arbitrary files via a symlink attack on temporary files via unknown attack vectors.

References

https://techsupport.services.ibm.com/server/pseries.subscriptionSvcs?mode=18&ID=279

https://exchange.xforce.ibmcloud.com/vulnerabilities/16008

http://www.securityfocus.com/bid/10231

http://www.osvdb.org/5712

http://www.osvdb.org/5711

http://www-1.ibm.com/support/search.wss?rs=0&q=IY55790&apar=only

http://www-1.ibm.com/support/search.wss?rs=0&q=IY55789&apar=only

http://securitytracker.com/id?1009975

http://secunia.com/advisories/11496

Details

Source: Mitre, NVD

Published: 2004-12-31

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 6.2

Vector: CVSS2#AV:L/AC:H/Au:N/C:C/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N