Lucene search
HistoryAug 02, 2001 - 4:00 a.m.
CVE-2001-0573
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.5
Confidence
High
EPSS
0
Percentile
9.7%
lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2) lslv in a certain directory that is under the user’s control, which cause lsfs to access the programs in that directory.
Affected configurations
Node
ibmaixMatch4
Related
cve
cve
CVE-2001-0573
2002-03-09 05:00:00
cert
cert
IBM AIX lsfs utility invokes grep and lslv with relative pathnames
2001-09-05 00:00:00
cvelist
cvelist
CVE-2001-0573
2002-03-09 05:00:00
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.5
Confidence
High
EPSS
0
Percentile
9.7%
Related for NVD:CVE-2001-0573