Vulnerabilities > CVE-2002-1594 - Local Security vulnerability in Grpck

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
grpck
pwck
NVD
Published: 2002-01-02
Updated: 2017-07-11

Summary

Buffer overflow in (1) grpck and (2) pwck, if installed setuid on a system as recommended in some AIX documentation, may allow local users to gain privileges via a long command line argument.

Vulnerable Configurations

Part Description Count
Application
Grpck
1
Application
Pwck
1

References