IBM AIX Dtterm Local Privilege Escalation Vulnerability

Bugtraq ID:	19786
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Aug 31 2006 12:00AM
Updated:	Sep 05 2006 05:18PM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	IBM AIX 5.3 L IBM AIX 5.2 L IBM AIX 5.3 IBM AIX 5.2
Not Vulnerable:

IBM AIX Dtterm Local Privilege Escalation Vulnerability

IBM AIX is prone to a privilege-escalation vulnerability in dtterm. This issue may allow an unprivileged user to execute arbitrary code with superuser privileges.

IBM AIX Dtterm Local Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

IBM AIX Dtterm Local Privilege Escalation Vulnerability

Solution:
IBM has released an advisory and APAR fixes to address this issue. Please see the references for more information.

IBM AIX Dtterm Local Privilege Escalation Vulnerability

References:

• AIX APAR IY89045 (IBM)
  
• AIX APAR IY89052 (IBM)
  
• AIX Homepage (IBM)