CWE Code: 362
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Summary: the inventory scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for aix 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack on a command line argument (log file).  note: this might be related to cve-2006-5002.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2004-12-31
Last Modified Date: 2017-07-29