PT-2001-2223 · Ibm · Aix

Publicado 2001-06-19 · Atualizado 2017-10-10 · CVE-2001-1080

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AIX versions 4.3.x through 5.1

Description The issue allows local users to gain privileges by modifying the DIAGDATADIR environment variable to point to a Trojan horse program, which is then executed by diagrpt.

Recommendations For AIX versions 4.3.x through 5.1, restrict access to the DIAGDATADIR environment variable to prevent unauthorized modifications. As a temporary workaround, consider setting the DIAGDATADIR variable to a trusted directory to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2001-1080

Produtos afetados

Aix

Referências · 5

• 🔥 https://exploit-db.com/exploits/20965 · Exploit
• http://securityfocus.com/bid/2916 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6734 · Nota
• http://www-1.ibm.com/services/continuity/recover1.nsf/MSS/MSS-OAR-E01-2001.225.1/%24file/oar225.txt · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-1080 · Nota de Segurança