VulnerabilityModified

CVE-2005-2236

Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via format strings in command line arguments.

HIGH 7.2EPSS 1.07%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.07%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via format strings in command line arguments.

CVSS 2.0: 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS: 1.07% probability · 63th percentile
CISA KEV: Not listed
Affected: ibm/aix
Source: cve@mitre.org

References

http://securitytracker.com/id?1014132
http://www.caughq.org/advisories/CAU-2005-0003.txtVendor Advisory
http://www.securityfocus.com/bid/13911Exploit
http://securitytracker.com/id?1014132
http://www.caughq.org/advisories/CAU-2005-0003.txtVendor Advisory
http://www.securityfocus.com/bid/13911Exploit

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.