Vulnerabilities > CVE-2008-1274 - Local Privilege Escalation vulnerability in IBM AIX 6.1.0

047910
CVSS 6.9 - MEDIUM
Attack vector
LOCAL
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
ibm
NVD
Published: 2008-03-10
Updated: 2017-09-29

Summary

Untrusted search path vulnerability in man in IBM AIX 6.1.0 allows local users to execute arbitrary code via a malicious program in the man directory. Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426: Untrusted Search Path'

Vulnerable Configurations

Part Description Count
OS
Ibm
1

Oval

accepted2008-07-07T04:00:20.040-04:00
classvulnerability
contributors
  • nameYuzheng Zhou
    organizationHewlett-Packard
  • nameMichael Wood
    organizationHewlett-Packard
definition_extensions
  • commentIBM AIX 5.3 is installed
    ovaloval:org.mitre.oval:def:5325
  • commentIBM AIX 6.1 is installed
    ovaloval:org.mitre.oval:def:5267
descriptionUntrusted search path vulnerability in man in IBM AIX 6.1.0 allows local users to execute arbitrary code via a malicious program in the man directory.
familyunix
idoval:org.mitre.oval:def:5169
statusaccepted
submitted2008-04-11T15:10:44.000-05:00
titleIBM AIX "man" Untrusted Binaries Path Privilege Escalation Vulnerability
version46

References