CVE-2003-0170

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Unknown vulnerability in ftpd in IBM AIX 5.2, when configured to use Kerberos 5 for authentication, allows remote attackers to gain privileges via unknown attack vectors.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www-1.ibm.com/services/continuity/recover1.nsf/MSS/MSS-OAR-E01-2003.0469.1
http://www-1.ibm.com/support/docview.wss?uid=isg1IY42424Patch, Vendor Advisory
http://www.osvdb.org/4878
http://www.securityfocus.com/bid/7346Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/11823
http://www-1.ibm.com/services/continuity/recover1.nsf/MSS/MSS-OAR-E01-2003.0469.1
http://www-1.ibm.com/support/docview.wss?uid=isg1IY42424Patch, Vendor Advisory
http://www.osvdb.org/4878
http://www.securityfocus.com/bid/7346Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/11823

Timeline

Published: Mar 29, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-01717.2DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execu CVE-2003-01727.5Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a c CVE-2003-01737.2xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges.CVE-2003-01749.8The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP s CVE-2003-01752.1SGI IRIX before 6.5.21 allows local users to cause a denial of service (kernel panic) via a certain call to the PIOCSWATCH ioctl.CVE-2003-01765.0The Name Service Daemon (nsd), when running on an NIS master on SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows remote CVE-2003-01774.6SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, does not follow "-" entries in the /etc/group file, which may cause subsequen CVE-2003-017810.0Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary c CVE-2003-01797.5Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via m CVE-2003-01805.0Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as dem CVE-2003-01815.0Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST req CVE-2003-01875.0The connection tracking core of Netfilter for Linux 2.4.20, with CONFIG_IP_NF_CONNTRACK enabled or the ip_conntrack module loaded, allows re