7.2
CVSSv2

CVE-2004-2312

Published: 31/12/2004 Updated: 11/07/2017
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 725
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Buffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain privileges via a long CC argument.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm aix 4.3.3

Exploits

source: wwwsecurityfocuscom/bid/9903/info GNU make for IBM AIX has been reported to be prone to a buffer overflow vulnerability, the issue is reported to exist due to a lack of sufficient boundary checks performed when reading the path to the CC compiler Because the GNU make utility is reported to run with setGID root privileges, a loca ...