CVE-2012-4833

Published: Oct 1, 2012Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

fuser in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly restrict the -k option, which allows local users to kill arbitrary processes via a crafted command line.

Affected (3)

Products: Ibm: Aix, Vios

Ibm

2 products

Aix

Vios

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	Version 6.1
Ibm Aix	Version 7.1
Ibm Vios	Version 2.2.1.4 fp-25_sp-02

Related CWEs

CWE-264

References (18)

http://aix.software.ibm.com/aix/efixes/security/fuser_advisory.asc

Source: psirt@us.ibm.com

PatchVendor Advisory

http://secunia.com/advisories/50708

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=isg1IV28151

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=isg1IV28749

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=isg1IV28754

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=isg1IV28756

Source: psirt@us.ibm.com

http://www.securityfocus.com/bid/55726

Source: psirt@us.ibm.com

http://www.securitytracker.com/id?1027586

Source: psirt@us.ibm.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/78907

Source: psirt@us.ibm.com

http://aix.software.ibm.com/aix/efixes/security/fuser_advisory.asc