Lucene search

MitreCVE-2005-2236

HistoryJul 12, 2005 - 4:00 a.m.

CVE-2005-2236

2005-07-1204:00:00

mitre

web.nvd.nist.gov

ibm

aix

format string vulnerability

local execution

arbitrary code

command line arguments

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.001

Percentile

21.5%

JSON

Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via format strings in command line arguments.

Affected configurations

Nvd

Node

ibmaixMatch5.3

VendorProductVersionCPE
ibmaix5.3cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	aix	5.3	cpe:2.3:o:ibm:aix:5.3:::::::*

References

securitytracker.com/id?1014132

www.caughq.org/advisories/CAU-2005-0003.txt

www.securityfocus.com/bid/13911

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.001

Percentile

21.5%

JSON

Related for CVE-2005-2236