CVE-2013-3005

Published: Jul 6, 2013Modified: Apr 29, 2026

8.5

Vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Exploitability: 6.8 / Impact: 10.0

Source: NVD

Description

The TFTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, when RBAC is enabled, allows remote authenticated users to bypass intended file-ownership restrictions, and read or overwrite arbitrary files, via unspecified vectors.

Affected (3)

Products: Ibm: Aix, Vios

Ibm

2 products

Aix

Vios

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	Version 6.1
Ibm Aix	Version 7.1
Ibm Vios	Version 2.2.2.2 fp-26_sp-02

Related CWEs

CWE-264

References (18)

http://aix.software.ibm.com/aix/efixes/security/tftp_advisory.asc

Source: psirt@us.ibm.com

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=isg1IV40221

Source: psirt@us.ibm.com

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=isg1IV42700

Source: psirt@us.ibm.com

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=isg1IV42932

Source: psirt@us.ibm.com

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=isg1IV42933

Source: psirt@us.ibm.com

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=isg1IV42934

Source: psirt@us.ibm.com

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=isg1IV42935

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/85366

Source: psirt@us.ibm.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19519

Source: psirt@us.ibm.com

http://aix.software.ibm.com/aix/efixes/security/tftp_advisory.asc