AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2007-5805

MEDIUM · CVSS 6.9 EPSS 0.31%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-11-05 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2007-5805
Severity
MEDIUM
CVSS
6.9
EPSS
0.31%

Original Filing — NVD Description

cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an arbitrary file, and enable world writability of this file, via a symlink attack involving use of the file's name as the argument. NOTE: this issue is due to an incomplete fix for CVE-2007-5804.