6.6

CVE-2007-2996

Unspecified vulnerability in perl.rte 5.8.0.10 through 5.8.0.95 on IBM AIX 5.2, and 5.8.2.10 through 5.8.2.50 on AIX 5.3, allows local users to gain privileges via unspecified vectors related to the installation and "waiting for a legitimate user to execute a binary that ships with Perl."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Aix Version5.2
Ibm ≫ Aix Version5.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.29% 0.2
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.6 2.7 10
AV:L/AC:M/Au:S/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://aix.software.ibm.com/aix/efixes/security/perl_ifix.tar.Z
Patch
http://osvdb.org/36754
http://secunia.com/advisories/25478
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=isg1IY98394
http://www-1.ibm.com/support/docview.wss?uid=isg1IY98395
http://www-1.ibm.com/support/search.wss?rs=0&q=IY98396&apar=only
http://www.securityfocus.com/bid/24241
Patch
http://www.securitytracker.com/id?1018177
http://www.vupen.com/english/advisories/2007/2004