CVE-2012-2179

MediumCVSS 6.9/10Last modified Jun 16, 2026

Description

libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.

Metrics

CVSS 2.0 6.9/10AV:L/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://aix.software.ibm.com/aix/efixes/security/libodm_advisory.ascPatch, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IV21379Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IV21381Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IV21382Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IV21383Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IV22019Vendor Advisory
http://www.osvdb.org/83133
http://www.securitytracker.com/id?1027193
https://exchange.xforce.ibmcloud.com/vulnerabilities/75510
http://aix.software.ibm.com/aix/efixes/security/libodm_advisory.ascPatch, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IV21379Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IV21381Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IV21382Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IV21383Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IV22019Vendor Advisory
http://www.osvdb.org/83133
http://www.securitytracker.com/id?1027193
https://exchange.xforce.ibmcloud.com/vulnerabilities/75510

Timeline

Published: Jun 22, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-21804.3The chaining functionality in the Distributed Relational Database Architecture (DRDA) module in IBM DB2 9.7 before FP6 and 9.8 before FP5 al CVE-2012-21815.0Directory traversal vulnerability in the Dojo module in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF14, and 8.0, allows remote attacke CVE-2012-21836.8Session fixation vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management f CVE-2012-21846.8Session fixation vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management f CVE-2012-21854.0IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Mana CVE-2012-21869.0Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asteris CVE-2012-21875.0IBM Remote Supervisor Adapter II firmware for System x3650, x3850 M2, and x3950 M2 1.13 and earlier generates weak RSA keys, which makes it CVE-2012-21887.2IBM Power Hardware Management Console (HMC) 7R3.5.0 before SP4, 7R7.1.0 and 7R7.2.0 before 7R7.2.0 SP3, and 7R7.3.0 before SP2, and Systems CVE-2012-21905.0IBM Global Security Kit (aka GSKit), as used in IBM HTTP Server in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x befor CVE-2012-21915.0IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other produ CVE-2012-21924.9The socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local users to cause a denial of service (system cr CVE-2012-21934.3Cross-site scripting (XSS) vulnerability in Query Studio in IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1