Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2003-0119

The secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with the loadmodule, which allows remote attackers to directly connect to the daemon and conduct unauthorized activities.

Published

2004-02-03T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

6.4

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	ibm	aix	4.3.3	Yes
Operating System	ibm	aix	5.1	Yes
Operating System	ibm	aix	5.2	Yes

References

http://secunia.com/advisories/8221 ([email protected])
http://www-1.ibm.com/services/continuity/recover1.nsf/4699c03b46f2d4f68525678c006d45ae/85256a3400529a8685256cde0008ddde?OpenDocument ([email protected])
http://www.kb.cert.org/vuls/id/624713 Patch, Third Party Advisory, US Government Resource ([email protected])
http://www.securityfocus.com/bid/7264 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/8221 (af854a3a-2127-422b-91ae-364da2661108)
http://www-1.ibm.com/services/continuity/recover1.nsf/4699c03b46f2d4f68525678c006d45ae/85256a3400529a8685256cde0008ddde?OpenDocument (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/624713 Patch, Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/7264 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)