CVE-2005-0240

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-02 · updated 2026-06-16

Description

Format string vulnerability in chdev on IBM AIX 5.2 allows local users to execute arbitrary code via format string specifiers in a command line argument, which is not properly handled when printing an error message.

Affected products

IBM AIX: 5.2

References

http://www-1.ibm.com/support/docview.wss?uid=isg1IY67455
http://www-1.ibm.com/support/docview.wss?uid=isg1IY67654
http://www.idefense.com/application/poi/display?type=vulnerabilities
https://exchange.xforce.ibmcloud.com/vulnerabilities/19244
http://www-1.ibm.com/support/docview.wss?uid=isg1IY67455
http://www-1.ibm.com/support/docview.wss?uid=isg1IY67654
http://www.idefense.com/application/poi/display?type=vulnerabilities
https://exchange.xforce.ibmcloud.com/vulnerabilities/19244

Get alerted when CVE-2005-0240 or the next vulnerability affects your stack