Unscored severity · published Nov 5, 2007
CVE-2007-5804
cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create or overwrite an…
–
CVSS
0.3%
EPSS
No
On KEV
Description
cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create or overwrite an arbitrary file, and enable world writability of this file, by using the file's name as the argument.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
Aix · Ibm
5.2; 5.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5804
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5804
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=611
secunia.com
http://secunia.com/advisories/27437
www-1.ibm.com
http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03055
www-1.ibm.com
http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03061
Patch
http://www.securityfocus.com/bid/26258
More from Aix
10.0
CVE-2024-56346
IBM AIX command execution
9.9
CVE-2026-18835
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-16816
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-15068
Vulnerabilities in IBM AIX and PowerVM VIOS
9.8
CVE-2026-19437
Vulnerabilities in IBM AIX and PowerVM VIOS