Vulnerability Description
Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final substring of a hostname alias, as demonstrated by hostnames ending in "unix".
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Aix | 5.2 |
Related Weaknesses (CWE)
References
- http://osvdb.org/40393
- http://secunia.com/advisories/26715PatchVendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY98506Patch
- http://www.securityfocus.com/bid/25556Patch
- http://www.vupen.com/english/advisories/2007/3059
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3846Patch
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3847Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36447
- http://osvdb.org/40393
- http://secunia.com/advisories/26715PatchVendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY98506Patch
- http://www.securityfocus.com/bid/25556Patch
- http://www.vupen.com/english/advisories/2007/3059
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3846Patch
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3847Patch
FAQ
What is CVE-2007-4798?
CVE-2007-4798 is a vulnerability with a CVSS score of 6.6 (MEDIUM). Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final substring of a hostname ali...
How severe is CVE-2007-4798?
CVE-2007-4798 has been rated MEDIUM with a CVSS base score of 6.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-4798?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Aix.