Every CVE Search/ Get API key

CVE-2001-1079

create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with...

3.6 Low

create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service.

Exploit likelihood

0.34%Down 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 3.6

create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service.

Record
CVE-2001-1079
CVSS 2.0
3.6 LowAV:L/AC:L/Au:N/C:N/I:P/A:P
Updated
2026-11-02
CVE List No score

create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service.

Record
CVE-2001-1079
Updated
2026-11-02
EUVDEUVD-2001-1060 No score

create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service.

Record
EUVD-2001-1060
Updated
2026-11-03
GitHub AdvisoriesGHSA-v5fc-vg2r-5f25 No score

create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with...

create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service.

Record
GHSA-v5fc-vg2r-5f25
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2001-1079 is a low vulnerability (CVSS 3.6) in Ibm Aix, published February 13, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 26th percentile. No source names a fixed version.

References

MoveEnter Open