CVE-2012-0745

IBM AIX/Vios - Privilege Escalation

Title source: llm
STIX 2.1

Description

The getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not properly interact with customer-extended LDAP user filtering, which allows local users to gain privileges via unspecified vectors.

References (12)

Core 12
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1027021
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IV19098
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IV18637
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/49073
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/74679
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IV19077
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IV19097
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IV18464
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/53393
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IV18638
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/81683

Scores

EPSS 0.0039
EPSS Percentile 31.7%

Details

CWE
CWE-264
Status published
Products (14)
ibm/aix 5.3
ibm/aix 6.1
ibm/aix 7.1
ibm/vios 2.1.0.10
ibm/vios 2.1.2.12
ibm/vios 2.1.2.13
ibm/vios 2.1.3.10
ibm/vios 2.2.0.10
ibm/vios 2.2.0.11
ibm/vios 2.2.0.12
... and 4 more
Published May 04, 2012
Tracked Since Feb 18, 2026