CVE-2004-2697: IBM Aix

Medium severity, CVSS 6.9. EPSS: 0.6% chance of exploitation in the next 30 days.

The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack on a command line argument (log file). NOTE: this might be related to CVE-2006-5002.

Affected products

• IBM Aix: version 4.3.3 only; version 5.1 only; version 5.1l only

Published 2004-12-31. Last modified 2026-06-16.