CVE-2009-1786: IBM Aix

Medium severity, CVSS 6.9. EPSS: 0.7% chance of exploitation in the next 30 days.

The malloc subsystem in libc in IBM AIX 5.3 and 6.1 allows local users to create or overwrite arbitrary files via a symlink attack on the log file associated with the MALLOCDEBUG environment variable.

Affected products

• IBM Aix: version 5.3 only; version 6.1 only

Published 2009-05-26. Last modified 2026-06-16.