7.8

CVE-2016-8972

IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the bellmail client. IBM APARs: IV91006, IV91007, IV91008, IV91010, IV91011.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Aix Version 6.1
Ibm ≫ Aix Version 7.1
Ibm ≫ Aix Version 7.2
Ibm ≫ Vios Version 2.2.0.0
Ibm ≫ Vios Version 2.2.0.10
Ibm ≫ Vios Version 2.2.0.11
Ibm ≫ Vios Version 2.2.0.12
Ibm ≫ Vios Version 2.2.0.13
Ibm ≫ Vios Version 2.2.1.0
Ibm ≫ Vios Version 2.2.1.1
Ibm ≫ Vios Version 2.2.1.3
Ibm ≫ Vios Version 2.2.1.4
Ibm ≫ Vios Version 2.2.1.5
Ibm ≫ Vios Version 2.2.1.6
Ibm ≫ Vios Version 2.2.1.7
Ibm ≫ Vios Version 2.2.1.8
Ibm ≫ Vios Version 2.2.2.0
Ibm ≫ Vios Version 2.2.2.1
Ibm ≫ Vios Version 2.2.2.2
Ibm ≫ Vios Version 2.2.2.3
Ibm ≫ Vios Version 2.2.2.4
Ibm ≫ Vios Version 2.2.2.6
Ibm ≫ Vios Version 2.2.2.70
Ibm ≫ Vios Version 2.2.3.0
Ibm ≫ Vios Version 2.2.3.1
Ibm ≫ Vios Version 2.2.3.2
Ibm ≫ Vios Version 2.2.3.3
Ibm ≫ Vios Version 2.2.3.4
Ibm ≫ Vios Version 2.2.3.50
Ibm ≫ Vios Version 2.2.3.51
Ibm ≫ Vios Version 2.2.3.52
Ibm ≫ Vios Version 2.2.3.60
Ibm ≫ Vios Version 2.2.3.70
Ibm ≫ Vios Version 2.2.3.80
Ibm ≫ Vios Version 2.2.4.0
Ibm ≫ Vios Version 2.2.4.10
Ibm ≫ Vios Version 2.2.4.21
Ibm ≫ Vios Version 2.2.4.22
Ibm ≫ Vios Version 2.2.4.23
Ibm ≫ Vios Version 2.2.4.30
Ibm ≫ Vios Version 2.2.5.0
Ibm ≫ Vios Version 2.2.5.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.38% 0.686
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://aix.software.ibm.com/aix/efixes/security/bellmail_advisory.asc
Patch
Vendor Advisory
Mitigation
http://www.securityfocus.com/bid/94979
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037480
https://www.exploit-db.com/exploits/40950/