Lucene search

[email protected]CVE-1999-0093

HistoryOct 29, 1997 - 5:00 a.m.

CVE-1999-0093

1997-10-2905:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

aix

nslookup

command

root access

privilege

local users

cve-1999-0093

nvd

6.6 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON

AIX nslookup command allows local users to obtain root access by not dropping privileges correctly.

CPENameOperatorVersion
ibm:aixibm aixeq4.1.4
ibm:aixibm aixeq4.2
ibm:aixibm aixeq4.1.5
ibm:aixibm aixeq4.1.1
ibm:aixibm aixeq4.1.2
ibm:aixibm aixeq4.1
ibm:aixibm aixeq4.1.3

CPE	Name	Operator	Version
ibm:aix	ibm aix	eq	4.1.4
ibm:aix	ibm aix	eq	4.2
ibm:aix	ibm aix	eq	4.1.5
ibm:aix	ibm aix	eq	4.1.1
ibm:aix	ibm aix	eq	4.1.2
ibm:aix	ibm aix	eq	4.1
ibm:aix	ibm aix	eq	4.1.3

References

exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0093

6.6 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON

Related for CVE-1999-0093

cert1