CVE-2016-8972

CVE-2016-8972: vulnerability in IBM Corporation AIX

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 1.4%
from disclosure to weaponsame day
Published on NVDFeb 15
1st PoCDec 22
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the bellmail client. IBM APARs: IV91006, IV91007, IV91008, IV91010, IV91011.
Affected products
IBM Corporation · AIX
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.