CVE-2011-1384

 

Published at: - 04-01-2012 04:55

Last modified: - 26-09-2022 12:26

Total changes: - 2

Description

The (1) bin/invscoutClient_VPD_Survey and (2) sbin/invscout_lsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout operations on arbitrary files, via a symlink attack on an unspecified file.

Common Vulnerability Scoring System (CVSS)

AV:L/AC:H/Au:N/C:N/I:C/A:N

 

Verification logic

 

Reference

• 47222-Vendor Advisory
• 51059-
• 51083-
• http://aix.software.ibm.com/aix/efixes/security/invscout_advisory2.asc
• IV11643-
• aix-scout-symlink(71615)-

 

Keywords

NVD

 

CVE-2011-1384

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures