CVE-2013-4011 EXPLOIT
7.2
HIGH · CVSS 2.0 · EPSS 2.8% (pctl 86)
Patch early
A public exploit exists.
Description
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to gain privileges via vectors involving (1) arp.ib or (2) ibstat.
Scoring
| CVSS | 7.2 (HIGH, v2.0) |
|---|---|
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
| EPSS | 2.85% — more likely to be exploited than 86% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2013-07-18 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| ibm | aix |
| ibm | vios |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | ibstat $PATH - Local Privilege Escalation (Metasploit) | 2014-04-04 |
| exploit-db | IBM AIX 6.1/7.1 - Local Privilege Escalation | 2013-09-24 |
References
- http://aix.software.ibm.com/aix/efixes/security/infiniband_advisory.asc
- http://osvdb.org/95419
- http://osvdb.org/95420
- http://secunia.com/advisories/54215
- http://www.ibm.com/support/docview.wss?uid=isg1IV43561
- http://www.ibm.com/support/docview.wss?uid=isg1IV43562
- http://www.ibm.com/support/docview.wss?uid=isg1IV43580
- http://www.ibm.com/support/docview.wss?uid=isg1IV43582
- http://www.ibm.com/support/docview.wss?uid=isg1IV43756
- http://www.ibm.com/support/docview.wss?uid=isg1IV43827
- http://www.securityfocus.com/bid/61287
- http://www.securitytracker.com/id/1028792
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85617
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19167
- http://aix.software.ibm.com/aix/efixes/security/infiniband_advisory.asc
- http://osvdb.org/95419
- http://osvdb.org/95420
- http://secunia.com/advisories/54215
- http://www.ibm.com/support/docview.wss?uid=isg1IV43561
- http://www.ibm.com/support/docview.wss?uid=isg1IV43562
→ the Explorer · watch your stack · NVD