CVE-2017-1692

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. IBM X-Force ID: 134067.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
IBM	AIX	6.1; 5.3; 7.1; 7.2

References

http://aix.software.ibm.com/aix/efixes/security/suid_advisory.ascVendor Advisory
http://www.securitytracker.com/id/1040330Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/134067VDB Entry, Vendor Advisory
http://aix.software.ibm.com/aix/efixes/security/suid_advisory.ascVendor Advisory
http://www.securitytracker.com/id/1040330Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/134067VDB Entry, Vendor Advisory

Timeline

Published: Feb 7, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-169209.8v5/config/system.php in dayrui FineCms 5.2.0 has a default SYS_KEY value and does not require key regeneration for each installation, which CVE-2017-169218.8In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who i CVE-2017-169225.3In com.wowza.wms.timedtext.http.HTTPProviderCaptionFile in Wowza Streaming Engine before 4.7.1, traversal of the directory structure and ret CVE-2017-169238.8Command Injection vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_CVE-2017-169249.8Remote Information Disclosure and Escalation of Privileges in ManageEngine Desktop Central MSP 10.0.137 allows attackers to download unencry CVE-2017-169269.8Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an CVE-2017-169278.4The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write l CVE-2017-169287.8The arq_updater binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges CVE-2017-169298.1The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated directory traversal vulnerability expl CVE-2017-16935.6IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small CVE-2017-169309.8The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote attacker to execute arbitrary code due CVE-2017-169319.8parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference functio