10

CVE-1999-0113

Some implementations of rlogin allow root access if given a -froot parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Aix Version3.1
Ibm ≫ Aix Version3.2
Ibm ≫ Aix Version3.2.4
Ibm ≫ Aix Version3.2.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 18.66% 0.95
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.

http://www.securityfocus.com/bid/458
Third Party Advisory
Broken Link
VDB Entry