vendor:
eNetwork Firewall for AIX
by:
SecurityFocus
7.5
CVSS
HIGH
Insecure Scripts Manipulation
22
CWE
Product Name: eNetwork Firewall for AIX
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: AIX
2001
IBM’s eNetwork Firewall for AIX Vulnerability
IBM's eNetwork Firewall for AIX contains a number of vulnerability in scripts which manipulate files insecurely. When fwlsuser script is run it creates a temporary file called /tmp/fwlsuser.PID ( where PID is the process ID of the command being run ). If this file is created previously and is a link to any other file the output generated by the fwlsuser script will overwrite this linked file.
Mitigation:
The local fix as reported by the originator is to create a symbolic link to the /etc/passwd file and then remove it.