low3.6Public exploit code
CVE-2006-0133
Multiple directory traversal vulnerabilities in AIX 5.3 ML03 allow local users to determine the existence of files and read partial contents of certain files v…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM AIX 5.3 - 'GetShell' / 'GetCommand' File Disclosure2006-01-01 · local · aix · Verified
- IBM AIX 5.3 - 'GetShell' / 'GetCommand' File Enumeration2005-12-30 · local · aix · Verified
Impact
Multiple directory traversal vulnerabilities in AIX 5.3 ML03 allow local users to determine the existence of files and read partial contents of certain files via a .. (dot dot) in the argument to (1) getCommand.new (aka getCommand) and (2) getShell, a different vulnerability than CVE-2005-4273.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Aix | Version 5.3_ml03 |
References
- NVD record
- CVE.org record
- http://securitytracker.com/id?1015429
- http://www.securityfocus.com/archive/1/420589/100/0/threaded
- http://www.securityfocus.com/bid/16102
- http://www.securityfocus.com/bid/16103
- http://securitytracker.com/id?1015429
- http://www.securityfocus.com/archive/1/420589/100/0/threaded
- http://www.securityfocus.com/bid/16102
- http://www.securityfocus.com/bid/16103