CVE-2012-4833

IBM AIX 6.1, 7.1 and VIOS 2.2.1.4-FP-25 SP-02 - Arbitrary Process Termination via fuser -k Option

Title source: llm

Description

fuser in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly restrict the -k option, which allows local users to kill arbitrary processes via a crafted command line.

References (9)

Core 9

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/78907

Various Sources vendor-advisory x_refsource_aixapar

http://www.ibm.com/support/docview.wss?uid=isg1IV28756

Various Sources vendor-advisory x_refsource_aixapar

http://www.ibm.com/support/docview.wss?uid=isg1IV28754

Patch, Vendor Advisory x_refsource_confirm

http://aix.software.ibm.com/aix/efixes/security/fuser_advisory.asc

Various Sources vendor-advisory x_refsource_aixapar

http://www.ibm.com/support/docview.wss?uid=isg1IV28151

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/50708

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/55726

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1027586

Various Sources vendor-advisory x_refsource_aixapar

http://www.ibm.com/support/docview.wss?uid=isg1IV28749

Scores

EPSS 0.0039

EPSS Percentile 31.1%

Details

CWE

CWE-264

Status published

Products (3)

ibm/aix 6.1

ibm/aix 7.1

ibm/vios 2.2.1.4 fp-25_sp-02

Published Oct 01, 2012

Tracked Since Feb 18, 2026