PT-2005-1320 · Ibm · Ibm Aix

Publicado 2005-02-07 · Atualizado 2017-07-11 · CVE-2005-0240

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM AIX version 5.2

Description A format string issue in the chdev command allows local users to execute arbitrary code via format string specifiers in a command line argument. This occurs because the argument is not properly handled when printing an error message.

Recommendations For IBM AIX version 5.2, consider restricting access to the chdev command until a patch is available. As a temporary workaround, avoid using format string specifiers in command line arguments for the chdev command to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-0240

Produtos afetados

Ibm Aix

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-0240 · Nota de Segurança
• http://www-1.ibm.com/support/docview.wss?uid=isg1IY67455 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19244 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=isg1IY67654 · Aviso do Fabricante
• http://idefense.com/application/poi/display?type=vulnerabilities · Nota