CVE-2007-2996
First published: Mon Jun 04 2007(Updated: )
Unspecified vulnerability in perl.rte 5.8.0.10 through 5.8.0.95 on IBM AIX 5.2, and 5.8.2.10 through 5.8.2.50 on AIX 5.3, allows local users to gain privileges via unspecified vectors related to the installation and "waiting for a legitimate user to execute a binary that ships with Perl."
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM AIX | =5.3 | |
| IBM AIX | =5.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY98394
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY98395
- http://www.securityfocus.com/bid/24241
- http://secunia.com/advisories/25478
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY98396&apar=only
- http://www.securitytracker.com/id?1018177
- http://www.vupen.com/english/advisories/2007/2004
- http://osvdb.org/36754
Frequently Asked Questions
What is the severity of CVE-2007-2996?
CVE-2007-2996 is classified as a high severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2007-2996?
To fix CVE-2007-2996, upgrade to a patched version of perl.rte that addresses the privilege escalation issue.
Who is affected by CVE-2007-2996?
CVE-2007-2996 affects local users of IBM AIX versions 5.2 and 5.3 with specific perl.rte installations.
What are the implications of CVE-2007-2996?
CVE-2007-2996 may allow local users to execute binaries with elevated privileges, compromising system security.
Is there a workaround for CVE-2007-2996?
A temporary workaround for CVE-2007-2996 might include restricting access to vulnerable binaries until a patch is applied.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/author
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/ibm
- canonical/ibm aix
- version/ibm aix/5.3
- version/ibm aix/5.2