| Vulnerability Name: | CVE-2005-4273 (CCN-23638) | ||||||||
| Assigned: | 2005-12-15 | ||||||||
| Published: | 2005-12-15 | ||||||||
| Updated: | 2018-10-19 | ||||||||
| Summary: | Multiple unspecified vulnerabilities in (1) getShell and (2) getCommand in IBM AIX 5.3 allow local users to append to arbitrary files. | ||||||||
| CVSS v3 Severity: | 4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
| ||||||||
| CVSS v2 Severity: | 2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N)
| ||||||||
| Vulnerability Type: | CWE-noinfo | ||||||||
| Vulnerability Consequences: | Gain Privileges | ||||||||
| References: | Source: CCN Type: BugTraq Mailing List, Thu Dec 15 2005 - 11:12:52 CST Patches available for IBM AIX flaws Source: CCN Type: BugTraq Mailing List, Thu Dec 15 2005 - 12:00:15 CST AIX Heap Overflow paper Source: MITRE Type: CNA CVE-2005-4273 Source: CCN Type: SA18088 AIX Multiple Privilege Escalation Vulnerabilities Source: SECUNIA Type: Vendor Advisory 18088 Source: CCN Type: IBM Security Advisory 2005.12.15 A vulnerability in getShell and getCommand commands allow any user to overwrite arbitrary files. Source: BUGTRAQ Type: UNKNOWN 20051215 Patches available for IBM AIX flaws Source: BUGTRAQ Type: UNKNOWN 20051216 Re: Patches available for IBM AIX flaws Source: BUGTRAQ Type: UNKNOWN 20051215 Re: Patches available for IBM AIX flaws Source: BID Type: Patch 15880 Source: CCN Type: BID-15880 IBM AIX GetShell and GetCommand Arbitrary File Overwrite Vulnerability Source: VUPEN Type: Vendor Advisory ADV-2005-2947 Source: XF Type: UNKNOWN aix-getshell-getcommand-overwrite(23638) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||