Lucene search
MitreCVE-2001-0573HistoryMar 09, 2002 - 5:00 a.m.
CVE-2001-0573
2002-03-0905:00:00
mitre
web.nvd.nist.gov
24
aix
lsfs
privileges
local user
trojan horse
security vulnerability
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.5
Confidence
High
EPSS
0
Percentile
9.7%
lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2) lslv in a certain directory that is under the user’s control, which cause lsfs to access the programs in that directory.
Affected configurations
Node
ibmaixMatch4
Related
cert
cert
IBM AIX lsfs utility invokes grep and lslv with relative pathnames
2001-09-05 00:00:00
cvelist
cvelist
CVE-2001-0573
2002-03-09 05:00:00
nvd
nvd
CVE-2001-0573
2001-08-02 04:00:00
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.5
Confidence
High
EPSS
0
Percentile
9.7%
Related for CVE-2001-0573