CVEvulnerability
CVE-2000-1222
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2000-12-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by modifying the path to point to a malicious hostname program.
Affected configurations
• ibm aix (<= 4.2.1.12)
References
- http://www.kb.cert.org/vuls/id/17566 Third Party Advisory, US Government Resource
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6432 exchange.xforce.ibmcloud.com
- http://www.kb.cert.org/vuls/id/17566 Third Party Advisory, US Government Resource
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6432 exchange.xforce.ibmcloud.com