CVE-2000-1216
Current Description
Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine.
Basic Data
| Published | January 27, 2000 |
|---|
| Last Modified | July 11, 2017 |
|---|
| Assigner | cve@mitre.org |
|---|
| Data Type | CVE |
|---|
| Data Format | MITRE |
|---|
| Data Version | 4.0 |
|---|
| Problem Type | NVD-CWE-Other |
|---|
| CVE Data Version | 4.0 |
|---|
Base Metric V2
| CVSS 2 - Version | 2.0 |
|---|
| CVSS 2 - Vector String | AV:L/AC:L/Au:N/C:C/I:C/A:C |
|---|
| CVSS 2 - Access Vector | LOCAL |
|---|
| CVSS 2 - Access Complexity | LOW |
|---|
| CVSS 2 - Authentication | NONE |
|---|
| CVSS 2 - Confidentiality Impact | COMPLETE |
|---|
| CVSS 2 - Availability Impact | COMPLETE |
|---|
| CVSS 2 - Base Score | 7.2 |
|---|
| Severity | HIGH |
|---|
| Exploitability Score | 3.9 |
|---|
| Impact Score | 10.0 |
|---|
| Obtain All Privilege | true |
|---|
| Obtain User Privilege | false |
|---|
| Obtain Other Privilege | false |
|---|
Base Metric V3
No data provided.
Configurations
Vulnerable Software List
This CVE contains no version information.
References
| Name | Source | URL | Tags |
|---|
| VU#433499 | http://www.kb.cert.org/vuls/id/433499 | CERT-VN | Patch US Government Resource |
| IY07832 | http://www-1.ibm.com/support/docview.wss?uid=isg1IY07832 | AIXAPAR | |
| aix-portmir-echoerror-bo(7929) | https://exchange.xforce.ibmcloud.com/vulnerabilities/7929 | XF | |
Follow @discotekdotca