CVE Vulnerability

CVE-2007-2996

Unspecified vulnerability in perl.rte 5.8.0.10 through 5.8.0.95 on IBM AIX 5.2, and 5.8.2.10 through 5.8.2.50 on AIX 5.3, allows local users to gain privileges via unspecified vectors related to the installation and "waiting for a legitimate user to execute a binary that ships with Perl."

6.6 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 2.7 / Impact : 10

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

Scope

References
Link Resource
ftp://aix.software.ibm.com/aix/efixes/security/perl_ifix.tar.Z Patch
http://www-1.ibm.com/support/docview.wss?uid=isg1IY98394
http://www-1.ibm.com/support/docview.wss?uid=isg1IY98395
http://www.securityfocus.com/bid/24241 Patch
http://secunia.com/advisories/25478 Patch Vendor Advisory
http://www-1.ibm.com/support/search.wss?rs=0&q=IY98396&apar=only
http://www.securitytracker.com/id?1018177
http://www.vupen.com/english/advisories/2007/2004
http://osvdb.org/36754
Configurations

Configuration 1

cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*
Information

Published : 2007-06-04 05:30

Updated : 2012-10-31 02:36

NVD link : CVE-2007-2996

Mitre link : CVE-2007-2996

Products Affected
No products.
CWE
NVD-CWE-Other