Lucene search

PRIOn knowledge basePRION:CVE-2012-0745

HistoryMay 04, 2012 - 4:55 p.m.

Design/Logic Flaw

2012-05-0416:55:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not properly interact with customer-extended LDAP user filtering, which allows local users to gain privileges via unspecified vectors.

CPENameOperatorVersion
aixeq5.3
aixeq7.1
aixeq6.1
vioseq2.1.0.10
vioseq2.2.0.13
vioseq2.1.2.12
vioseq2.2.1.0
vioseq2.2.0.11
vioseq2.2.0.12
vioseq2.2.1.1

Name	Operator	Version
aix	eq	5.3
aix	eq	7.1
aix	eq	6.1
vios	eq	2.1.0.10
vios	eq	2.2.0.13
vios	eq	2.1.2.12
vios	eq	2.2.1.0
vios	eq	2.2.0.11
vios	eq	2.2.0.12
vios	eq	2.2.1.1

Rows per page:

1-10 of 141

References

aix.software.ibm.com/aix/efixes/security/ldapauth_advisory2.asc

osvdb.org/81683

secunia.com/advisories/49073

www.ibm.com/support/docview.wss?uid=isg1IV18464

www.ibm.com/support/docview.wss?uid=isg1IV18637

www.ibm.com/support/docview.wss?uid=isg1IV18638

www.ibm.com/support/docview.wss?uid=isg1IV19077

www.ibm.com/support/docview.wss?uid=isg1IV19097

www.ibm.com/support/docview.wss?uid=isg1IV19098

www.securityfocus.com/bid/53393

www.securitytracker.com/id?1027021

exchange.xforce.ibmcloud.com/vulnerabilities/74679