ID CVE-2006-4254
Summary Unspecified vulnerability in setlocale in IBM AIX 5.1.0 through 5.3.0 allows local users to gain privileges via unspecified vectors. IBM has released an advisory and interim fixes to address this issue.
References
Vulnerable Configurations
  • cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*
  • cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*
  • cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 20-07-2017 - 01:32)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
aixapar
  • IY88183
  • IY88512
  • IY88528
bid 19578
confirm ftp://aix.software.ibm.com/aix/efixes/security/README
osvdb 27996
sectrack 1016712
secunia 21541
vupen ADV-2006-3327
xf aix-setlocale-privilege-escalation(28482)
Last major update 20-07-2017 - 01:32
Published 21-08-2006 - 20:04
Last modified 20-07-2017 - 01:32
Back to Top