Unscored severity · published Sep 11, 2008
CVE-2008-4018
swcons in bos.rte.console in IBM AIX 5.2.0 through 6.1.1 allows local users in the system group to create or overwrite an arbitrary file, and establish weak permissions and root…
–
CVSS
0.4%
EPSS
No
On KEV
Description
swcons in bos.rte.console in IBM AIX 5.2.0 through 6.1.1 allows local users in the system group to create or overwrite an arbitrary file, and establish weak permissions and root ownership for this file, via unspecified vectors. NOTE: this can be leveraged to gain privileges. NOTE: this issue exists because of an incomplete fix for CVE-2007-5805.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
Aix · Ibm
5.2; 5.3; 6.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4018
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4018
aix.software.ibm.com
http://aix.software.ibm.com/aix/efixes/security/swcons_advisory.asc
secunia.com
http://secunia.com/advisories/31739
securitytracker.com
http://securitytracker.com/id?1020818
www.ibm.com
http://www.ibm.com/support/docview.wss?uid=isg1IZ18334
www.ibm.com
http://www.ibm.com/support/docview.wss?uid=isg1IZ18335
www.ibm.com
http://www.ibm.com/support/docview.wss?uid=isg1IZ18338
More from Aix
10.0
CVE-2024-56346
IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls
9.9
CVE-2026-18835
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-16816
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-15068
Vulnerabilities in IBM AIX and PowerVM VIOS
9.8
CVE-2026-19437
Vulnerabilities in IBM AIX and PowerVM VIOS