CVE-2005-0250

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-02 · updated 2026-06-16

Description

Format string vulnerability in auditselect on IBM AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via format string specifiers in a command line argument.

Affected products

IBM AIX: 5.1, 5.2, 5.3

References

http://secunia.com/advisories/14198
http://securitytracker.com/id?1013103
http://www-1.ibm.com/support/docview.wss?uid=isg1IY67472
http://www-1.ibm.com/support/docview.wss?uid=isg1IY67519
http://www-1.ibm.com/support/docview.wss?uid=isg1IY67802
http://www.idefense.com/application/poi/display?id=193&type=vulnerabilities&flashstatus=false
http://www.kb.cert.org/vuls/id/896729
http://www.securityfocus.com/bid/12496
https://exchange.xforce.ibmcloud.com/vulnerabilities/19255
http://secunia.com/advisories/14198
http://securitytracker.com/id?1013103
http://www-1.ibm.com/support/docview.wss?uid=isg1IY67472

Get alerted when CVE-2005-0250 or the next vulnerability affects your stack