CVE-2004-2697

Published Oct 6, 2007 CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Description
The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack on a command line argument (log file). NOTE: this might be related to CVE-2006-5002.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2004-2687 The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack on a command line argument (log file). NOTE: this might be related to CVE-2006-5002.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00311}

epss

{'score': 0.00698}

Weaknesses
  • CWE-362

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 8, 2024, 1:36 AM
Reserved
Oct 6, 2007, 12:00 AM
Status
Modified
Published
Dec 31, 2004, 5:00 AM
Modified
Jun 16, 2026, 10:10 PM