CVEvulnerability
CVE-2016-8972
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-02-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the bellmail client. IBM APARs: IV91006, IV91007, IV91008, IV91010, IV91011.
Affected configurations
• ibm aix 6.1
• ibm aix 7.1
• ibm aix 7.2
• ibm vios 2.2.0.0
• ibm vios 2.2.0.10
• ibm vios 2.2.0.11
• ibm vios 2.2.0.12
• ibm vios 2.2.0.13
• ibm vios 2.2.1.0
• ibm vios 2.2.1.1
• ibm vios 2.2.1.3
• ibm vios 2.2.1.4
• ibm vios 2.2.1.5
• ibm vios 2.2.1.6
• ibm vios 2.2.1.7
• ibm vios 2.2.1.8
• ibm vios 2.2.2.0
• ibm vios 2.2.2.1
• ibm vios 2.2.2.2
• ibm vios 2.2.2.3
• ibm vios 2.2.2.4
• ibm vios 2.2.2.6
• ibm vios 2.2.2.70
• ibm vios 2.2.3.0
• ibm vios 2.2.3.1
• ibm vios 2.2.3.2
• ibm vios 2.2.3.3
• ibm vios 2.2.3.4
• ibm vios 2.2.3.50
• ibm vios 2.2.3.51
• ibm vios 2.2.3.52
• ibm vios 2.2.3.60
• ibm vios 2.2.3.70
• ibm vios 2.2.3.80
• ibm vios 2.2.4.0
• ibm vios 2.2.4.10
• ibm vios 2.2.4.21
• ibm vios 2.2.4.22
• ibm vios 2.2.4.23
• ibm vios 2.2.4.30
• ibm vios 2.2.5.0
• ibm vios 2.2.5.10
Related
Weakness · not in database (1)
References
- http://aix.software.ibm.com/aix/efixes/security/bellmail_advisory.asc Mitigation, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/94979 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037480 www.securitytracker.com
- https://www.exploit-db.com/exploits/40950/ www.exploit-db.com
- http://aix.software.ibm.com/aix/efixes/security/bellmail_advisory.asc Mitigation, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/94979 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037480 www.securitytracker.com
- https://www.exploit-db.com/exploits/40950/ www.exploit-db.com