CVE-2001-1080: Critical severity IBM AIX vulnerability
Published Jun 19, 2001
·Updated
diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allows local users to gain privileges by modifying the variable to point to a Trojan horse program.
Affected Software
2 affected components
IBM AIX=4.3
IBM AIX=5.1
Remediation
Event History
Jun 19, 2001
CVE Published
04:00 AM
Mar 9, 2002
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-1080?
CVE-2001-1080 is considered to have a high severity level due to its potential to allow local users to gain elevated privileges.
2
How do I fix CVE-2001-1080?
To mitigate CVE-2001-1080, ensure that the DIAGDATADIR environment variable is not modified by unauthorized users.
3
What versions of AIX are affected by CVE-2001-1080?
CVE-2001-1080 affects IBM AIX versions 4.3.x and 5.1.
4
Can the user exploit CVE-2001-1080 remotely?
No, CVE-2001-1080 requires local access to exploit the vulnerability.
5
What type of attacks can occur due to CVE-2001-1080?
CVE-2001-1080 can lead to privilege escalation attacks through the execution of Trojan horse programs.