What’s Vulnerable › Vulnerabilities

CVE-2016-8972

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-02-15 · updated 2026-06-17
• Weakness: CWE-264

Description

IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the bellmail client. IBM APARs: IV91006, IV91007, IV91008, IV91010, IV91011.

Affected products

• IBM AIX: 6.1, 7.1, 7.2
• IBM VIOS: 2.2.0.0, 2.2.0.10, 2.2.0.11, 2.2.0.12, 2.2.0.13, 2.2.1.0 (+33)

References

• http://aix.software.ibm.com/aix/efixes/security/bellmail_advisory.asc
• http://www.securityfocus.com/bid/94979
• http://www.securitytracker.com/id/1037480
• https://www.exploit-db.com/exploits/40950/
• http://aix.software.ibm.com/aix/efixes/security/bellmail_advisory.asc
• http://www.securityfocus.com/bid/94979
• http://www.securitytracker.com/id/1037480
• https://www.exploit-db.com/exploits/40950/

Get alerted when CVE-2016-8972 or the next vulnerability affects your stack