CVE - CVE-2012-4833

CVE-ID
CVE-2012-4833	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
fuser in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly restrict the -k option, which allows local users to kill arbitrary processes via a crafted command line.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
AIXAPAR:IV28151 URL:http://www.ibm.com/support/docview.wss?uid=isg1IV28151 AIXAPAR:IV28749 URL:http://www.ibm.com/support/docview.wss?uid=isg1IV28749 AIXAPAR:IV28754 URL:http://www.ibm.com/support/docview.wss?uid=isg1IV28754 AIXAPAR:IV28756 URL:http://www.ibm.com/support/docview.wss?uid=isg1IV28756 BID:55726 URL:http://www.securityfocus.com/bid/55726 CONFIRM:http://aix.software.ibm.com/aix/efixes/security/fuser_advisory.asc SECTRACK:1027586 URL:http://www.securitytracker.com/id?1027586 SECUNIA:50708 URL:http://secunia.com/advisories/50708 XF:aix-fuser-kill-process(78907) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/78907
Assigning CNA
IBM Corporation
Date Record Created
20120906	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20120906)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)