CVE-2016-8972

IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the bellmail client. IBM APARs: IV91006, IV91007, IV91008, IV91010, IV91011.

Affected

IBM Corporation · AIX

CVSS v3.0 NVD

7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.38% chance of exploitation in the next 30 days, 72nd percentile

Published

2017-02-15

Updated

2024-08-06

Proof-of-concept exploits (1)

• RhinoSecurityLabs/CVEs906★ · 2026-09-14

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/40950

Security advisories

• http://aix.software.ibm.com/aix/efixes/security/bellmail_advisory.asc
• http://www.securityfocus.com/bid/94979

References

• CVE Record
• NVD entry

Related

• CVE-2016-3053
• CVE-2016-6079
• CVE-2018-20621
• CVE-2018-5757
• CVE-2019-16864
• CVE-2019-9758