CVE-2009-0370

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-01-30 · updated 2026-06-16

Description

Multiple unspecified vulnerabilities in IBM AIX 5.2.0 through 6.1.2 allow local users to append data to arbitrary files, related to (1) rmsock and (2) rmsock64 not creating "secure log files."

Affected products

IBM AIX: 5.2, 5.2.2, 5.2_l, 5.3, 5.3.7, 5.3.8 (+5)

References

http://aix.software.ibm.com/aix/efixes/security/rmsock_advisory.asc
http://www.ibm.com/support/docview.wss?uid=isg1IZ40386
http://www.ibm.com/support/docview.wss?uid=isg1IZ41510
http://www.ibm.com/support/docview.wss?uid=isg1IZ41593
http://www.ibm.com/support/docview.wss?uid=isg1IZ41599
http://www.ibm.com/support/docview.wss?uid=isg1IZ42785
http://www.ibm.com/support/docview.wss?uid=isg1IZ42786
http://www.ibm.com/support/docview.wss?uid=isg1IZ42787
http://www.ibm.com/support/docview.wss?uid=isg1IZ42788
http://www.securityfocus.com/bid/33522
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6028
http://aix.software.ibm.com/aix/efixes/security/rmsock_advisory.asc

Get alerted when CVE-2009-0370 or the next vulnerability affects your stack