The FTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly manage privileges in an RBAC environment, which allows attackers to bypass intended file-read restrictions by leveraging the setuid installation of the ftp executable file.

The remote host is missing AIX PTF U854672, which is related to the security of the package bos.mp64.

The remote host is missing AIX PTF U854884, which is related to the security of the package bos.mp64.

The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp.

The remote host is missing AIX PTF U854839, which is related to the security of the package bos.mp64.

The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp.

The remote host is missing AIX PTF U854751, which is related to the security of the package bos.mp64.

The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp.

The remote host is missing AIX PTF U854618, which is related to the security of the package bos.mp64.

The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp.

The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp.

ID	Name	Product	Family	Severity
71163	AIX 6.1 TL 9 : bos.mp64 (U854672)	Nessus	AIX Local Security Checks	medium
66278	AIX 7.1 TL 1 : bos.mp64 (U854884)	Nessus	AIX Local Security Checks	medium
66275	AIX 7.1 : bos.mp64 (U854839)	Nessus	AIX Local Security Checks	medium
65711	AIX 6.1 TL 6 : bos.mp64 (U854751)	Nessus	AIX Local Security Checks	medium
65708	AIX 6.1 TL 7 : bos.mp64 (U854618)	Nessus	AIX Local Security Checks	medium
64510	AIX 7.1 TL 2 : ftp (IV30669)	Nessus	AIX Local Security Checks	medium
64509	AIX 6.1 TL 8 : ftp (IV28651)	Nessus	AIX Local Security Checks	medium
63742	AIX 7.1 TL 1 : ftp (IV28787)	Nessus	AIX Local Security Checks	medium
63741	AIX 7.1 TL 0 : ftp (IV28785)	Nessus	AIX Local Security Checks	medium
63737	AIX 6.1 TL 6 : ftp (IV28715)	Nessus	AIX Local Security Checks	medium
63734	AIX 6.1 TL 7 : ftp (IV23331)	Nessus	AIX Local Security Checks	medium

Detections

Analytics

CVE-2012-4845

critical

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium