CVE-2012-2200

IBM VIOS 2.2.1.4-FP-25 SP-02 and AIX 6.1, 7.1 - Privilege Escalation via Sendmail .forward File

Title source: llm
STIX 2.1

Description

The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain privileges by entering a command in a .forward file in a home directory.

References (7)

Core 7
Core References
Various Sources vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IV22965
Various Sources vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IV22963
Various Sources vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IV22964
Various Sources vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IV22966
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1027207
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/76466

Scores

EPSS 0.0037
EPSS Percentile 29.6%

Details

CWE
CWE-264
Status published
Products (3)
ibm/aix 6.1
ibm/aix 7.1
ibm/vios 2.2.1.4 fp-25_sp-02
Published Jun 27, 2012
Tracked Since Feb 18, 2026