NVD

Id
35781  
Name
CVE-2014-8904  
Description
lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCMD_LQUERYLV environment-variable value.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-01-15  
Modified Date
2016-12-06  
Seq
2014-8904  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
183253 35781 CVE-2014-8904 http://aix.software.ibm.com/aix/efixes/security/lvm_advisory.asc  View
183254 35781 CVE-2014-8904 IV67907  View
183255 35781 CVE-2014-8904 IV67908  View
183256 35781 CVE-2014-8904 IV68070  View
183257 35781 CVE-2014-8904 IV68082  View
183258 35781 CVE-2014-8904 IV68478  View
183259 35781 CVE-2014-8904 1031596  View
183260 35781 CVE-2014-8904 ibm-aix-cve20148904-sec-bypass(99193)  View
183261 35781 CVE-2014-8904 38576  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18823 JVNDB-2014-007698 IBM AIX および VIOS の cmdlvm の lquerylv における権限を取得される脆弱性 IBM AIX および VIOS の cmdlvm の lquerylv には、権限を取得される脆弱性が存在します。 CVE-2014-8904 76197 CVE-2014-8904 35781 7.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007698.html 2014-12-15 2015-01-20 View