Unscored severity · published Nov 16, 2010
CVE-2010-4274
reset_diragent_keys in the Common agent in IBM Systems Director 6.2.0 has 754 permissions, which allows local users to gain privileges by leveraging system group membership
–
CVSS
0.3%
EPSS
No
On KEV
Description
reset_diragent_keys in the Common agent in IBM Systems Director 6.2.0 has 754 permissions, which allows local users to gain privileges by leveraging system group membership.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DA
Director Agent · Ibm
6.2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-4274
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-4274
Vendor Advisory
http://secunia.com/advisories/42239
securitytracker.com
http://securitytracker.com/id?1024736
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=isg1IC71821
www.securityfocus.com
http://www.securityfocus.com/bid/44839
Vendor Advisory
http://www.vupen.com/english/advisories/2010/2978
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/63238
More from Director Agent
–
CVE-2010-1347
Director Agent 6.1 before 6.1.2.3 in IBM Systems Director on AIX and Linux uses incorrect permissions for the (1) diruninstall and (2) opt/ibm/director/bin/wcitinst scripts, which…
–
CVE-2004-1759
Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary…
–
CVE-2004-1760
The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote…