CVE-2007-5804
cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to...
cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create or overwrite an arbitrary file, and enable world writability of this file, by using the file's name as the argument.
Exploit likelihood
What each source reports
NVD Score used
cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create or overwrite an arbitrary file, and enable world writability of this file, by using the file's name as the argument.
- Record
CVE-2007-5804- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create or overwrite an arbitrary file, and enable world writability of this file, by using the file's name as the argument.
- Record
CVE-2007-5804- Updated
- 2026-11-02
EUVDEUVD-2007-5774 No score
cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create or overwrite an arbitrary file, and enable world writability of this file, by using the file's name as the argument.
- Record
EUVD-2007-5774- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wjg4-7q94-8q6c No score
cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to...
cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create or overwrite an arbitrary file, and enable world writability of this file, by using the file's name as the argument.
- Record
GHSA-wjg4-7q94-8q6c- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5804 is a medium vulnerability (CVSS 6.9) in Ibm Aix, published November 5, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 23rd percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/38154
secunia.com/advisories/27437
securityfocus.com/bid/26258
www-1.ibm.com/support/docview.wss?uid=isg1IZ03055
labs.idefense.com/intelligence/vulnerabilities/display.php?id=611
www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200710%2FSECURITY%2F20071030%2Fdatafile100405
nvd.nist.gov/vuln/detail/CVE-2007-5804
github.com/advisories/GHSA-wjg4-7q94-8q6c