CVE-2008-1596

Trusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the trustchk_block_write function, which might allow local users to modify trusted files, related to missing checks in the TSD_FILES_LOCK policy for modifications performed via hard links, a different vulnerability than CVE-2007-6680.

Score
CVSS 2.0 7.2 High
Status
Modified - cve@mitre.org
Published
2008-03-31
Last modified
2024-08-07
Weaknesses
CWE-264

Affected products

References