CVE-2010-1347 - Director Agent 6.1 before 6.1.2.3 in IBM Systems Director on AIX and Linux uses incorrect permissions for the (1) diruninstall and (2) opt/ibm/director/bin/wcitinst scripts, which allows local users to gain privileges by executing these scripts

Back Back to CVE browser

HIGH

Director Agent 6.1 before 6.1.2.3 in IBM Systems Director on AIX and Linux uses incorrect permissions for the (1) diruninstall and (2) opt/ibm/director/bin/wcitinst scripts, which allows local users to gain privileges by executing these scripts

Published Apr 12, 2010

7.2

HIGH

CVSS 2.0

EPSS 0.35%

Description

Director Agent 6.1 before 6.1.2.3 in IBM Systems Director on AIX and Linux uses incorrect permissions for the (1) diruninstall and (2) opt/ibm/director/bin/wcitinst scripts, which allows local users to gain privileges by executing these scripts.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (7)

http://osvdb.org/63595
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/39194
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg1PM08236
vendor-advisoryx_refsource_AIXAPARVendor Advisory
http://www.securityfocus.com/bid/39305
vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1023831
vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2010/0830
vdb-entryx_refsource_VUPENVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/57611
vdb-entryx_refsource_XF

Link	Providers	Tags
http://osvdb.org/63595		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/39194		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg1PM08236		vendor-advisoryx_refsource_AIXAPARVendor Advisory
http://www.securityfocus.com/bid/39305		vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1023831		vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2010/0830		vdb-entryx_refsource_VUPENVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/57611		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 12, 2010

Updated Aug 7, 2024

Reserved Apr 12, 2010

Link CVE-2010-1347

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2010-1347

Red Hat

Severity n/a

Public date n/a

Links CVE-2010-1347