Unscored severity · published Apr 12, 2010
CVE-2010-1347
Director Agent 6.1 before 6.1.2.3 in IBM Systems Director on AIX and Linux uses incorrect permissions for the (1) diruninstall and (2) opt/ibm/director/bin/wcitinst scripts, which…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Director Agent 6.1 before 6.1.2.3 in IBM Systems Director on AIX and Linux uses incorrect permissions for the (1) diruninstall and (2) opt/ibm/director/bin/wcitinst scripts, which allows local users to gain privileges by executing these scripts.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DA
Director Agent · Ibm
6.1; 6.1.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1347
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1347
osvdb.org
http://osvdb.org/63595
Vendor Advisory
http://secunia.com/advisories/39194
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg1PM08236
www.securityfocus.com
http://www.securityfocus.com/bid/39305
www.securitytracker.com
http://www.securitytracker.com/id?1023831
Vendor Advisory
http://www.vupen.com/english/advisories/2010/0830
More from Director Agent
–
CVE-2010-4274
reset_diragent_keys in the Common agent in IBM Systems Director 6.2.0 has 754 permissions, which allows local users to gain privileges by leveraging system group membership
–
CVE-2004-1759
Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary…
–
CVE-2004-1760
The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote…