CVE-2012-2200

Published: Jun 27, 2012Modified: Apr 29, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain privileges by entering a command in a .forward file in a home directory.

Affected (3)

Products: Ibm: Aix, Vios

Ibm

2 products

Aix

Vios

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	Version 6.1
Ibm Aix	Version 7.1
Ibm Vios	Version 2.2.1.4 fp-25_sp-02

Related CWEs

CWE-264

References (14)

http://aix.software.ibm.com/aix/efixes/security/sendmail1_advisory.asc

Source: psirt@us.ibm.com

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=isg1IV22963

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=isg1IV22964

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=isg1IV22965

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=isg1IV22966

Source: psirt@us.ibm.com

http://www.securitytracker.com/id?1027207

Source: psirt@us.ibm.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/76466

Source: psirt@us.ibm.com

http://aix.software.ibm.com/aix/efixes/security/sendmail1_advisory.asc