CVE-2003-0119 — IBM AIX vulnerability

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
2.6%
top 14.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM AIX
Timeline
PublishedFeb 3
Latest updateApr 29

Description

The secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with the loadmodule, which allows remote attackers to directly connect to the daemon and conduct unauthorized activities.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDibm/aix4.3.3, 5.1, 5.2+2

Patches

Patch: www.kb.cert.org ↗Patch: www.securityfocus.com ↗Patch: www.kb.cert.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-m4cx-pcq9-ppj4: The secldapclntd daemon in AIX 4↗2022-04-29
▶
CVEList
CVE-2003-0119: The secldapclntd daemon in AIX 4↗2004-01-14
▶
CVE-2003-0119 — IBM AIX vulnerability | cvebase