{"api_version":"1","generated_at":"2026-07-23T06:34:42+00:00","cve":"CVE-2007-5804","urls":{"html":"https://cve.report/CVE-2007-5804","api":"https://cve.report/api/cve/CVE-2007-5804.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-5804","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-5804"},"summary":{"title":"CVE-2007-5804","description":"cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the \"-p\" option to swcons, which allows local users in the system group to create or overwrite an arbitrary file, and enable world writability of this file, by using the file's name as the argument.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-11-05 17:46:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.9","severity":"","vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.securityfocus.com/bid/26258","name":"http://www.securityfocus.com/bid/26258","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"IBM AIX Swcons Arbitrary File Access Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"ftp://aix.software.ibm.com/aix/efixes/security/cfgcon_ifix.tar","name":"ftp://aix.software.ibm.com/aix/efixes/security/cfgcon_ifix.tar","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"","mime":"application/x-tar","httpstatus":"200","archivestatus":"404"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03055","name":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03055","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM notice: The page you requested cannot be displayed","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://secunia.com/advisories/27437","name":"http://secunia.com/advisories/27437","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM AIX Multiple Privilege Escalation Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=611","name":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=611","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38154","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38154","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200710%2FSECURITY%2F20071030%2Fdatafile100405","name":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200710%2FSECURITY%2F20071030%2Fdatafile100405","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"IBM - My notifications","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03061","name":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03061","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM notice: The page you requested cannot be displayed","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-5804","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-5804","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"5804","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"ibm","cpe5":"aix","cpe6":"5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5804","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"ibm","cpe5":"aix","cpe6":"5.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T15:47:00.214Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"aix-swcons-insecure-permissions(38154)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38154"},{"name":"27437","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/27437"},{"name":"26258","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/26258"},{"name":"IZ03055","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03055"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"ftp://aix.software.ibm.com/aix/efixes/security/cfgcon_ifix.tar"},{"name":"IZ03061","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03061"},{"name":"20071030 IBM AIX swcons Local Arbitrary File Access Vulnerability","tags":["third-party-advisory","x_refsource_IDEFENSE","x_transferred"],"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=611"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200710%2FSECURITY%2F20071030%2Fdatafile100405"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-10-25T00:00:00.000Z","descriptions":[{"lang":"en","value":"cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the \"-p\" option to swcons, which allows local users in the system group to create or overwrite an arbitrary file, and enable world writability of this file, by using the file's name as the argument."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"aix-swcons-insecure-permissions(38154)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38154"},{"name":"27437","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/27437"},{"name":"26258","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/26258"},{"name":"IZ03055","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03055"},{"tags":["x_refsource_CONFIRM"],"url":"ftp://aix.software.ibm.com/aix/efixes/security/cfgcon_ifix.tar"},{"name":"IZ03061","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03061"},{"name":"20071030 IBM AIX swcons Local Arbitrary File Access Vulnerability","tags":["third-party-advisory","x_refsource_IDEFENSE"],"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=611"},{"tags":["x_refsource_CONFIRM"],"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200710%2FSECURITY%2F20071030%2Fdatafile100405"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-5804","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the \"-p\" option to swcons, which allows local users in the system group to create or overwrite an arbitrary file, and enable world writability of this file, by using the file's name as the argument."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"aix-swcons-insecure-permissions(38154)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38154"},{"name":"27437","refsource":"SECUNIA","url":"http://secunia.com/advisories/27437"},{"name":"26258","refsource":"BID","url":"http://www.securityfocus.com/bid/26258"},{"name":"IZ03055","refsource":"AIXAPAR","url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03055"},{"name":"ftp://aix.software.ibm.com/aix/efixes/security/cfgcon_ifix.tar","refsource":"CONFIRM","url":"ftp://aix.software.ibm.com/aix/efixes/security/cfgcon_ifix.tar"},{"name":"IZ03061","refsource":"AIXAPAR","url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ03061"},{"name":"20071030 IBM AIX swcons Local Arbitrary File Access Vulnerability","refsource":"IDEFENSE","url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=611"},{"name":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200710%2FSECURITY%2F20071030%2Fdatafile100405","refsource":"CONFIRM","url":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200710%2FSECURITY%2F20071030%2Fdatafile100405"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-5804","datePublished":"2007-11-05T17:00:00.000Z","dateReserved":"2007-11-05T00:00:00.000Z","dateUpdated":"2024-08-07T15:47:00.214Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-11-05 17:46:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"5804","Ordinal":"1","Title":"CVE-2007-5804","CVE":"CVE-2007-5804","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"5804","Ordinal":"1","NoteData":"cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the \"-p\" option to swcons, which allows local users in the system group to create or overwrite an arbitrary file, and enable world writability of this file, by using the file's name as the argument.","Type":"Description","Title":"CVE-2007-5804"},{"CveYear":"2007","CveId":"5804","Ordinal":"2","NoteData":"2007-11-05","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"5804","Ordinal":"3","NoteData":"2017-07-28","Type":"Other","Title":"Modified"}]}}}