Unscored CVE-2005-0240 EUVD-2005-0241GHSA-vghg-wg87-m285

Format string vulnerability in chdev on IBM AIX 5.2 allows local users to execute arbitrary code via format string specifiers in a command …

Published Feb 7, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Format string vulnerability in chdev on IBM AIX 5.2 allows local users to execute arbitrary code via format string specifiers in a command line argument, which is not properly handled when printing an error message.

References

IY67455 vendor-advisory
20050207 IBM AIX chdev Local Format String Vulnerability third-party-advisory
aix-chdev-format-string(19244) vdb-entry
IY67654 vendor-advisory