EUVD-2006-4988

Malware in sbrugna...

IBM Inventory Scout < 2.2.0.19 Symlink Vulnerability

According to its self-reported version, the Inventory Scout install on the remote host is a version prior to 2.2.0.19. It, therefore, could allow a local user to delete arbitrary files or have Inventory Scout operations operate on arbitrary files using a symlink attack. C Tenable Network Security...

CVE-2006-5002: Undefined Security Weakness

Unspecified vulnerability in IBM Inventory Scout for AIX 2.2.0.0 through 2.2.0.9 invscoutClientVPDSurvey allows attackers to overwrite arbitrary files via unspecified vectors...