CVE-2001-1080

Published: Jun 19, 2001Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allows local users to gain privileges by modifying the variable to point to a Trojan horse program.

Affected (2)

Products: Ibm: Aix

Ibm

1 product

Aix

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	Version 4.3
Ibm Aix	Version 5.1

References (6)

http://www-1.ibm.com/services/continuity/recover1.nsf/MSS/MSS-OAR-E01-2001.225.1/%24file/oar225.txt

Source: cve@mitre.org

http://www.securityfocus.com/bid/2916

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/6734

Source: cve@mitre.org

http://www-1.ibm.com/services/continuity/recover1.nsf/MSS/MSS-OAR-E01-2001.225.1/%24file/oar225.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/2916

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/6734

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.