CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Permissions Privileges and Access Controls
Summary: the ftp client in ibm aix 6.1 and 7.1, and vios 2.2.1.4-fp-25 sp-02, does not properly manage privileges in an rbac environment, which allows attackers to bypass intended file-read restrictions by leveraging the setuid installation of the ftp executable file.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/NONE/NONE
Published Date: 2012-10-20
Last Modified Date: 2017-09-19