CVE-2005-0250

IBM AIX auditselect is affected by a format-string vulnerability that can allow a local user to execute arbitrary code with root privileges. The flaw arises from passing user-supplied data to formatted output routines, where printf-like functions do not adequately filter format specifiers. A loca...

CVE-2005-0250

Format string vulnerability in auditselect on IBM AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via format string specifiers in a command line argument...