• info
• discussion
• exploit
• solution
• references

IBM AIX RM_MLCache_File Insecure Temporary File Creation Vulnerability

Solution:

IBM has provided an APAR to address this issue in AIX 5.3.0. APARs for other affected versions are pending release. IBM has also released interim fixes to address the issue.


IBM AIX 5.1

• IBM rm_mlcache_file_ifix.tar.Z
  ftp://aix.software.ibm.com/aix/efixes/security/rm_mlcache_file_ifix.ta r.Z

IBM AIX 5.2

• IBM rm_mlcache_file_ifix.tar.Z
  ftp://aix.software.ibm.com/aix/efixes/security/rm_mlcache_file_ifix.ta r.Z

IBM AIX 5.3

• IBM rm_mlcache_file_ifix.tar.Z
  ftp://aix.software.ibm.com/aix/efixes/security/rm_mlcache_file_ifix.ta r.Z


• IBM IY82866
  http://www.ibm.com/servers/eserver/support/unixservers/aixfixes.html

IBM AIX 5.1 L

• IBM rm_mlcache_file_ifix.tar.Z
  ftp://aix.software.ibm.com/aix/efixes/security/rm_mlcache_file_ifix.ta r.Z

IBM AIX 5.2 L

• IBM rm_mlcache_file_ifix.tar.Z
  ftp://aix.software.ibm.com/aix/efixes/security/rm_mlcache_file_ifix.ta r.Z

IBM AIX 5.3 L

• IBM rm_mlcache_file_ifix.tar.Z
  ftp://aix.software.ibm.com/aix/efixes/security/rm_mlcache_file_ifix.ta r.Z


• IBM IY82866
  http://www.ibm.com/servers/eserver/support/unixservers/aixfixes.html