CVE-2000-1222 — IBM AIX vulnerability

4 documents4 sources
Severity
7.2HIGHNVD
EPSS
0.2%
top 52.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM AIX
Timeline
PublishedDec 10
Latest updateApr 30

Description

AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by modifying the path to point to a malicious hostname program.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

▶NVDibm/aix4.2.1.12

🔴Vulnerability Details

2
GHSA
GHSA-4hwr-6mhv-fvh3: AIX sysback before 4↗2022-04-30
▶
CVEList
CVE-2000-1222: AIX sysback before 4↗2005-04-21
▶

💥Exploits & PoCs

1
Exploit-DB
BeOS 5.0 - TCP Fragmentation Remote Denial of Service↗2000-05-18
▶
CVE-2000-1222 — IBM AIX vulnerability | cvebase