PT-2002-1811 · Ibm · Aix

Published 2002-08-12 · Updated 2008-09-10 · CVE-2002-0790

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: AIX (affected versions not specified)

Description: The issue concerns the exposure of an encrypted password in the cspoc.log file due to the clchkspuser and clpasswdremote functions in AIX. This could potentially allow local users to gain privileges.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-0790

Affected Products

Aix

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2002-0790 · Security Note
• http://techsupport.services.ibm.com/server/aix.uhuic_getrec?args=DVsteamboat.boulder.ibm.com+DBAIX2+DA6854+STIY24556+USbin · Vendor Advisory