CVE-2008-0585

Published: Feb 5, 2008Modified: Apr 23, 2026

6.6

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:N

Exploitability: 3.9 / Impact: 9.2

Source: NVD

Description

sysmgt.websm.webaccess in IBM AIX 5.2 and 5.3 has world writable permissions for unspecified WebSM Remote Client files, which allows local users to "alter the behavior of" this client by overwriting these files.

Affected (2)

Products: Ibm: Aix

Ibm

1 product

Aix

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	Version 5.2
Ibm Aix	Version 5.3

Related CWEs

CWE-264

References (12)

http://secunia.com/advisories/28609

Source: cve@mitre.org

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=isg1IY97257

Source: cve@mitre.org

http://www.securityfocus.com/bid/27433

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0261

Source: cve@mitre.org

http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4066

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/39906

Source: cve@mitre.org

http://secunia.com/advisories/28609