What’s Vulnerable › Vulnerabilities

CVE-2009-1786

• Severity: medium (CVSS 6.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2009-05-26 · updated 2026-06-16
• Weakness: CWE-362

Description

The malloc subsystem in libc in IBM AIX 5.3 and 6.1 allows local users to create or overwrite arbitrary files via a symlink attack on the log file associated with the MALLOCDEBUG environment variable.

Affected products

• IBM AIX: 5.3, 6.1

References

• http://aix.software.ibm.com/aix/efixes/security/libc_advisory.asc
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=802
• http://secunia.com/advisories/35146
• http://securitytracker.com/id?1022261
• http://www.ibm.com/support/docview.wss?uid=isg1IZ50121
• http://www.ibm.com/support/docview.wss?uid=isg1IZ50129
• http://www.ibm.com/support/docview.wss?uid=isg1IZ50139
• http://www.ibm.com/support/docview.wss?uid=isg1IZ50445
• http://www.ibm.com/support/docview.wss?uid=isg1IZ50447
• http://www.ibm.com/support/docview.wss?uid=isg1IZ50500
• http://www.ibm.com/support/docview.wss?uid=isg1IZ50517
• http://www.osvdb.org/54617

Get alerted when CVE-2009-1786 or the next vulnerability affects your stack