Vulnerability in IBM Aix

CVE-2012-0745

The getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not properly interact with customer-extended LDAP user filtering, which allows local users to gain privileges via unspecified vectors.

EPSS: 0.004 (31.7th percentile) — read the EPSS interpretation.

Affected products

  • Ibm Aix — versions 5.3, 6.1, 7.1
  • Ibm Vios — versions 2.1.0.10, 2.1.2.12, 2.1.2.13
  • N/a — versions n/a

Weakness classification (CWE)

References