CVE-2014-3977

libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on a temporary file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2179.

CVSS v2.0

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.87% chance of exploitation in the next 30 days, 56th percentile

Published

2014-06-08

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/33725

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/33725

References

• CVE Record
• NVD entry

Related

• CVE-2014-3976
• CVE-2014-3978
• CVE-2014-3975
• CVE-2014-3990
• CVE-2014-3974
• CVE-2014-3991