at in bos.rte.cron on IBM AIX 5.2.0, 5.3.0 through 5.3.9, and 6.1.0 through 6.1.2 allows local users to read arbitrary files via unspecified vectors, related to failure to drop root privileges.

The at command does not drop permissions when reading certain files. A local attacker may exploit this error to read any file on the system because the command is setuid root.

The following file is vulnerable :

/usr/bin/at.

The remote host is missing AIX PTF U823619, which is related to the security of the package bos.rte.cron.

The at command does not drop permissions when reading certain files. A local attacker may exploit this error to read any file on the system because the command is setuid root.

The following file is vulnerable :

/usr/bin/at.

The remote host is missing AIX PTF U825668, which is related to the security of the package bos.rte.cron.

The at command does not drop permissions when reading certain files. A local attacker may exploit this error to read any file on the system because the command is setuid root.

The following file is vulnerable :

/usr/bin/at.

The remote host is missing AIX PTF U825550, which is related to the security of the package bos.rte.cron.

The at command does not drop permissions when reading certain files. A local attacker may exploit this error to read any file on the system because the command is setuid root.

The following file is vulnerable :

/usr/bin/at.

The remote host is missing AIX PTF U823854, which is related to the security of the package bos.rte.cron.

The at command does not drop permissions when reading certain files. A local attacker may exploit this error to read any file on the system because the command is setuid root.

The following file is vulnerable :

/usr/bin/at.

The remote host is missing AIX PTF U825004, which is related to the security of the package bos.rte.cron.

The at command does not drop permissions when reading certain files. A local attacker may exploit this error to read any file on the system because the command is setuid root.

The following file is vulnerable :

/usr/bin/at.

The remote host is missing AIX PTF U824780, which is related to the security of the package bos.rte.cron.

The at command does not drop permissions when reading certain files. A local attacker may exploit this error to read any file on the system because the command is setuid root.

The following file is vulnerable :

/usr/bin/at.

The remote host is missing AIX PTF U822098, which is related to the security of the package bos.rte.cron.

The at command does not drop permissions when reading certain files. A local attacker may exploit this error to read any file on the system because the command is setuid root.

The following file is vulnerable :

/usr/bin/at.

The remote host is missing AIX PTF U821986, which is related to the security of the package bos.rte.cron.

The at command does not drop permissions when reading certain files. A local attacker may exploit this error to read any file on the system because the command is setuid root.

The following file is vulnerable :

/usr/bin/at.

ID	Name	Product	Family	Severity
63781	AIX 6.1 TL 2 : at (IZ43459)	Nessus	AIX Local Security Checks	medium
63780	AIX 6.1 TL 1 : at (IZ43458)	Nessus	AIX Local Security Checks	medium
63779	AIX 6.1 TL 0 : at (IZ43457)	Nessus	AIX Local Security Checks	medium
63778	AIX 5.3 TL 9 : at (IZ43456)	Nessus	AIX Local Security Checks	medium
63777	AIX 5.3 TL 8 : at (IZ43455)	Nessus	AIX Local Security Checks	medium
63776	AIX 5.3 TL 7 : at (IZ43454)	Nessus	AIX Local Security Checks	medium
63775	AIX 5.3 TL 0 : at (IZ43453)	Nessus	AIX Local Security Checks	medium
63774	AIX 5.2 TL 0 : at (IZ43452)	Nessus	AIX Local Security Checks	medium
39811	AIX 5.2 TL 10 : bos.rte.cron (U823619)	Nessus	AIX Local Security Checks	medium
39250	AIX 6.1 TL 1 : bos.rte.cron (U825668)	Nessus	AIX Local Security Checks	medium
39181	AIX 6.1 TL 2 : bos.rte.cron (U825550)	Nessus	AIX Local Security Checks	medium
39032	AIX 6.1 : bos.rte.cron (U823854)	Nessus	AIX Local Security Checks	medium
38579	AIX 5.3 TL 7 : bos.rte.cron (U825004)	Nessus	AIX Local Security Checks	medium
38458	AIX 5.3 TL 9 : bos.rte.cron (U824780)	Nessus	AIX Local Security Checks	medium
38422	AIX 5.3 TL 8 : bos.rte.cron (U822098)	Nessus	AIX Local Security Checks	medium
38331	AIX 5.3 TL 6 : bos.rte.cron (U821986)	Nessus	AIX Local Security Checks	medium

Detections

Analytics

CVE-2009-0536

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium