Lucene search

K
cve[email protected]CVE-2007-4238
HistoryAug 08, 2007 - 10:17 p.m.

CVE-2007-4238

2007-08-0822:17:00
NVD-CWE-Other
web.nvd.nist.gov
22
aix
pioinit
privilege escalation
cve-2007-4238
nvd

7.7 High

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

AIX 5.2 and 5.3 install pioinit with user and group ownership of bin, which allows local users with bin or possibly printq privileges to gain root privileges by modifying pioinit.

CPENameOperatorVersion
ibm:aixibm aixeq5.3
ibm:aixibm aixeq5.2

7.7 High

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

Related for CVE-2007-4238