ID CVE-2007-1798
Summary Buffer overflow in the drmgr command in IBM AIX 5.2 and 5.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long path name.
References
Vulnerable Configurations
  • cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*
  • cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*
CVSS
Base: 7.2 (as of 11-10-2017 - 01:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:C/I:C/A:C
oval via4
accepted 2009-09-07T04:00:02.807-04:00
class vulnerability
contributors
name Aharon Chernin
organization DTCC
definition_extensions
  • comment IBM AIX 5200-10 is installed
    oval oval:org.mitre.oval:def:5076
  • comment IBM AIX 5300-00 through 5300-05 is installed
    oval oval:org.mitre.oval:def:6123
  • comment IBM AIX 5300-06 is installed
    oval oval:org.mitre.oval:def:4813
  • comment IBM AIX 5300-07 is installed
    oval oval:org.mitre.oval:def:5707
description Buffer overflow in the drmgr command in IBM AIX 5.2 and 5.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long path name.
family unix
id oval:org.mitre.oval:def:12575
status accepted
submitted 2009-07-27T10:12:07-04:00
title Buffer overflow in the drmgr command in IBM AIX 5.2 and 5.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long path name.
version 42
refmap via4
aixapar
  • IY95054
  • IY96753
  • IY96772
osvdb 34981
sectrack 1017841
vupen ADV-2007-1186
xf ibmaix-drmgr-bo(33354)
Last major update 11-10-2017 - 01:31
Published 02-04-2007 - 22:19
Last modified 11-10-2017 - 01:31
Back to Top