CVE-2007-4798

Severity: medium (CVSS 6.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-09-10 · updated 2026-06-16
Weakness: CWE-264

Description

Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final substring of a hostname alias, as demonstrated by hostnames ending in "unix".

Affected products

IBM AIX: 5.2, 5.3

References

http://osvdb.org/40393
http://secunia.com/advisories/26715
http://www-1.ibm.com/support/docview.wss?uid=isg1IY98506
http://www.securityfocus.com/bid/25556
http://www.vupen.com/english/advisories/2007/3059
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3846
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3847
https://exchange.xforce.ibmcloud.com/vulnerabilities/36447
http://osvdb.org/40393
http://secunia.com/advisories/26715
http://www-1.ibm.com/support/docview.wss?uid=isg1IY98506
http://www.securityfocus.com/bid/25556

Get alerted when CVE-2007-4798 or the next vulnerability affects your stack