Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.2

AIX 4.3.0 autofs maps can run code as root

CVE-2002-1548 · published 23 years ago
Summary

The autofs component in IBM AIX version 4.3.0 can be tricked into running commands with full system privileges when an executable map is used. This could let an attacker gain complete control of the server. Apply any available AIX updates, avoid using executable maps, and restrict access to the autofs configuration files.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm aix 4.3.0
cpe:2.3:o:ibm:aix:4.3.0:*:*:*:*:*:*:*
Original advisory text
Unknown vulnerability in autofs on AIX 4.3.0, when using executable maps, allows attackers to execute arbitrary commands as root, possibly related to "string handling around how the executable map ...
Unknown vulnerability in autofs on AIX 4.3.0, when using executable maps, allows attackers to execute arbitrary commands as root, possibly related to "string handling around how the executable map is called."
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.2 High
Exploitation
<1% chance of attack within 30 days
Timeline
Published31 Mar 2003
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2002-1548 · NVD
Track software like this
Free during beta