The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2... · CVE-2004-2697 · GitHub Advisory Database · GitHub

The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2...

Moderate severity Unreviewed Published Apr 29, 2022 to the GitHub Advisory Database • Updated Jan 30, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack on a command line argument (log file). NOTE: this might be related to CVE-2006-5002.

References

Published by the National Vulnerability Database

Dec 31, 2004

Published to the GitHub Advisory Database Apr 29, 2022

Last updated Jan 30, 2023