CVE-2005-2232

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Buffer overflow in invscout in IBM AIX 5.1.0 through 5.3.0 might allow local users to execute arbitrary code via a long command line argument.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/15636Exploit, Patch, Vendor Advisory
http://securitytracker.com/id?1014132Exploit
http://www.caughq.org/advisories/CAU-2005-0002.txtExploit, Vendor Advisory
http://www.securityfocus.com/advisories/8816Exploit, Vendor Advisory
http://www.securityfocus.com/bid/13909Exploit, Patch
http://secunia.com/advisories/15636Exploit, Patch, Vendor Advisory
http://securitytracker.com/id?1014132Exploit
http://www.caughq.org/advisories/CAU-2005-0002.txtExploit, Vendor Advisory
http://www.securityfocus.com/advisories/8816Exploit, Vendor Advisory
http://www.securityfocus.com/bid/13909Exploit, Patch

Timeline

Published: Jul 12, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-22337.2Buffer overflow in multiple "p" commands in IBM AIX 5.1, 5.2 and 5.3 might allow local users to execute arbitrary code via long command line CVE-2005-22347.2Buffer overflow in the getlvname command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long command lin CVE-2005-22357.2Buffer overflow in the diagTasksWebSM command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long comman CVE-2005-22367.2Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary CVE-2005-22377.2Format string vulnerability in the swcons command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary CVE-2005-22382.1ftpd in IBM AIX 5.1, 5.2 and 5.3 allows remote authenticated users to cause a denial of service (port exhaustion and memory consumption) by CVE-2005-22395.0oftpd 0.3.7 allows remote attackers to cause a denial of service via a USER command with a large number of null (\0) characters.CVE-2005-22402.1xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file.CVE-2005-22415.0Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 does not quickly time out R CVE-2005-22425.0Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to CVE-2005-22435.0Memory leak in inetinfo.exe in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)CVE-2005-22445.0The aupair service (aupair.exe) in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.