CVE-2011-1384
The (1) bin/invscoutClient_VPD_Survey and (2) sbin/invscout_lsvpd programs in invscout.rte before...
The (1) bin/invscoutClient_VPD_Survey and (2) sbin/invscout_lsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout operations on arbitrary files, via a symlink attack on an unspecified file.
Exploit likelihood
What each source reports
NVD Score used
The (1) bin/invscoutClient_VPD_Survey and (2) sbin/invscout_lsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout operations on arbitrary files, via a symlink attack on an unspecified file.
- Record
CVE-2011-1384- CVSS 2.0
- 4.0 Medium
AV:L/AC:H/Au:N/C:N/I:C/A:N - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
The (1) bin/invscoutClient_VPD_Survey and (2) sbin/invscout_lsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout operations on arbitrary files, via a symlink attack on an unspecified file.
- Record
CVE-2011-1384- Updated
- 2026-11-02
EUVDEUVD-2011-1391 No score
The (1) bin/invscoutClient_VPD_Survey and (2) sbin/invscout_lsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout operations on arbitrary files, via a symlink attack on an unspecified file.
- Record
EUVD-2011-1391- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2pqx-426g-hrmc No score
The (1) bin/invscoutClient_VPD_Survey and (2) sbin/invscout_lsvpd programs in invscout.rte before...
The (1) bin/invscoutClient_VPD_Survey and (2) sbin/invscout_lsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout operations on arbitrary files, via a symlink attack on an unspecified file.
- Record
GHSA-2pqx-426g-hrmc- Weakness
- CWE-59
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1384 is a medium vulnerability (CVSS 4.0) in Ibm Invscout.rte, published January 4, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/71615
secunia.com/advisories/47222
aix.software.ibm.com/aix/efixes/security/invscout_advisory2.asc
securityfocus.com/bid/51059
www-01.ibm.com/support/docview.wss?uid=isg1IV11643
nvd.nist.gov/vuln/detail/CVE-2011-1384
github.com/advisories/GHSA-2pqx-426g-hrmc