CVE-2005-0261

IBM AIX 5.2-5.3 - Unauthenticated Arbitrary File Read via lspath -f Option

Title source: llm

Description

lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which allows local users to read one line of arbitrary files.

References (6)

Core 6

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/19281

Vendor Advisory third-party-advisory x_refsource_idefense

http://www.idefense.com/application/poi/display?id=195&type=vulnerabilities

Patch, Vendor Advisory vendor-advisory x_refsource_aixapar

http://www-1.ibm.com/support/search.wss?rs=0&q=IY67655&apar=only

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/14232

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/12513

Patch, Vendor Advisory vendor-advisory x_refsource_aixapar

http://www-1.ibm.com/support/search.wss?rs=0&q=IY67457&apar=only

Scores

EPSS 0.0034

EPSS Percentile 26.7%

Details

Status published

Products (2)

ibm/aix 5.2

ibm/aix 5.3

Published Feb 10, 2005

Tracked Since Feb 18, 2026