NetSight
IP …
high7.8Public exploit code

CVE-2016-8972

IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the bellmail client.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the bellmail client. IBM APARs: IV91006, IV91007, IV91008, IV91010, IV91011.

Affected products

VendorProductAffected versions
IbmAix
Versions 6.1, 7.1, 7.2
IbmVios
Versions 2.2.0.0, 2.2.0.10, 2.2.0.11, 2.2.0.12, 2.2.0.13, 2.2.1.0

Weakness classification

CWE-264

References