CVEvulnerability
CVE-2004-2697
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-362
Description
The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack on a command line argument (log file). NOTE: this might be related to CVE-2006-5002.
Affected configurations
• ibm aix 4.3.3
• ibm aix 5.1
• ibm aix 5.1l
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- http://secunia.com/advisories/11200 Vendor Advisory
- http://www.osvdb.org/4582 www.osvdb.org
- http://www.securiteam.com/exploits/5CP0F0UDFG.html www.securiteam.com
- http://www.securityfocus.com/bid/9982 Exploit
- http://www.xfocus.org/exploits/200403/31.html www.xfocus.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15620 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/11200 Vendor Advisory
- http://www.osvdb.org/4582 www.osvdb.org
- http://www.securiteam.com/exploits/5CP0F0UDFG.html www.securiteam.com
- http://www.securityfocus.com/bid/9982 Exploit
- http://www.xfocus.org/exploits/200403/31.html www.xfocus.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15620 exchange.xforce.ibmcloud.com