CVE-2007-2996
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:S/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
5.1%
Unspecified vulnerability in perl.rte 5.8.0.10 through 5.8.0.95 on IBM AIX 5.2, and 5.8.2.10 through 5.8.2.50 on AIX 5.3, allows local users to gain privileges via unspecified vectors related to the installation and “waiting for a legitimate user to execute a binary that ships with Perl.”
Affected configurations
References
ftp://aix.software.ibm.com/aix/efixes/security/perl_ifix.tar.Z
osvdb.org/36754
secunia.com/advisories/25478
www-1.ibm.com/support/docview.wss?uid=isg1IY98394
www-1.ibm.com/support/docview.wss?uid=isg1IY98395
www-1.ibm.com/support/search.wss?rs=0&q=IY98396&apar=only
www.securityfocus.com/bid/24241
www.securitytracker.com/id?1018177
www.vupen.com/english/advisories/2007/2004
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:S/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
5.1%