CVE-1999-0118

IBM AIX - Privilege Escalation via infod X Display

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-1999-0118. PoCs published by Repent Security Inc.

AI-analyzed exploit summary This exploit targets the AIX infod daemon by sending a crafted request to change the printer command to a shell, allowing privilege escalation. It manipulates environment variables and UID/GID to spawn a root shell via the daemon.

Description

AIX infod allows local users to gain root access through an X display.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Repent Security Inc · clocalaix
https://www.exploit-db.com/exploits/19287

This exploit targets the AIX infod daemon by sending a crafted request to change the printer command to a shell, allowing privilege escalation. It manipulates environment variables and UID/GID to spawn a root shell via the daemon.

Classification
Working Poc 95%
Attack Type
Lpe
Complexity
Moderate
Reliability
Reliable
Target: AIX infod daemon (unspecified version)
No auth needed
Prerequisites: Access to a vulnerable AIX system with the infod daemon running · X11 display access for the spawned window
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=91158980826979&w=2

Scores

EPSS 0.0070
EPSS Percentile 48.4%

Details

Status published
Products (4)
ibm/aix 3.2
ibm/aix 4.1
ibm/aix 4.2
ibm/aix 4.3
Published Nov 01, 1998
Tracked Since Feb 18, 2026