CVE-2007-4238

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-08-08 · updated 2026-06-16

Description

AIX 5.2 and 5.3 install pioinit with user and group ownership of bin, which allows local users with bin or possibly printq privileges to gain root privileges by modifying pioinit.

Affected products

IBM AIX: 5.2, 5.3

References

http://osvdb.org/36782
http://secunia.com/advisories/26219
http://securitytracker.com/id?1018468
http://www-1.ibm.com/support/docview.wss?uid=isg1IY79785
http://www-1.ibm.com/support/docview.wss?uid=isg1IY79786
http://www.vupen.com/english/advisories/2007/2678
http://osvdb.org/36782
http://secunia.com/advisories/26219
http://securitytracker.com/id?1018468
http://www-1.ibm.com/support/docview.wss?uid=isg1IY79785
http://www-1.ibm.com/support/docview.wss?uid=isg1IY79786
http://www.vupen.com/english/advisories/2007/2678

Get alerted when CVE-2007-4238 or the next vulnerability affects your stack