PT-2003-1281 · Ibm · Autofs

Published 2003-03-31 · Updated 2020-10-13 · CVE-2002-1548

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions autofs version 4.3.0

Description The issue is related to the handling of executable maps in autofs on AIX, potentially allowing attackers to execute arbitrary commands as root. This may be connected to string handling around how the executable map is called.

Recommendations For autofs version 4.3.0, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2002-1548

Affected Products

Autofs

References · 3

• http://archives.neohapsis.com/archives/aix/2002-q4/0002.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1548 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19159 · Vendor Advisory