PT-2001-2223 · Ibm · Aix

Published 2001-06-19 · Updated 2017-10-10 · CVE-2001-1080

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AIX versions 4.3.x through 5.1

Description The issue allows local users to gain privileges by modifying the DIAGDATADIR environment variable to point to a Trojan horse program, which is then executed by diagrpt.

Recommendations For AIX versions 4.3.x through 5.1, restrict access to the DIAGDATADIR environment variable to prevent unauthorized modifications. As a temporary workaround, consider setting the DIAGDATADIR variable to a trusted directory to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2001-1080

Affected Products

Aix

References · 5

• 🔥 https://exploit-db.com/exploits/20965 · Exploit
• http://www-1.ibm.com/services/continuity/recover1.nsf/MSS/MSS-OAR-E01-2001.225.1/%24file/oar225.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1080 · Security Note
• http://securityfocus.com/bid/2916 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6734 · Note