IBM AIX CFGMGR Local Privilege Escalation and Arbitrary File Overwrite Vulnerabilities
BID:20190
Info
IBM AIX CFGMGR Local Privilege Escalation and Arbitrary File Overwrite Vulnerabilities
| Bugtraq ID: | 20190 |
| Class: | Unknown |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 25 2006 12:00AM |
| Updated: | Sep 26 2006 06:51PM |
| Credit: | The vendor has disclosed these issues. |
| Vulnerable: |
IBM AIX 5.3 IBM AIX 5.2 |
| Not Vulnerable: | |
Discussion
IBM AIX CFGMGR Local Privilege Escalation and Arbitrary File Overwrite Vulnerabilities
IBM AIX is prone to these locally exploitable vulnerabilities:
- a privilege-escalation issue
- an arbitrary-file-overwrite issue.
A local attacker may be able to exploit these issues to gain elevated privileges on the affected computer. A successful exploit will lead to a complete compromise. Attackers may also overwrite arbitrary files, resulting in denial-of-service conditions.
Attackers require access to the 'system' group to execute the affected binary.
IBM AIX versions 5.2 and 5.3 are vulnerable to these issues.
IBM AIX is prone to these locally exploitable vulnerabilities:
- a privilege-escalation issue
- an arbitrary-file-overwrite issue.
A local attacker may be able to exploit these issues to gain elevated privileges on the affected computer. A successful exploit will lead to a complete compromise. Attackers may also overwrite arbitrary files, resulting in denial-of-service conditions.
Attackers require access to the 'system' group to execute the affected binary.
IBM AIX versions 5.2 and 5.3 are vulnerable to these issues.
Exploit / POC
IBM AIX CFGMGR Local Privilege Escalation and Arbitrary File Overwrite Vulnerabilities
Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution / Fix
IBM AIX CFGMGR Local Privilege Escalation and Arbitrary File Overwrite Vulnerabilities
Solution:
IBM has released an advisory and interim fixes to address this issue. Please see the references for more information.
IBM AIX 5.2
IBM AIX 5.3
Solution:
IBM has released an advisory and interim fixes to address this issue. Please see the references for more information.
IBM AIX 5.2
-
IBM cfgmgr_ifix.tar.Z
ftp://aix.software.ibm.com/aix/efixes/security/cfgmgr_ifix.tar.Z
IBM AIX 5.3
-
IBM cfgmgr_ifix.tar.Z
ftp://aix.software.ibm.com/aix/efixes/security/cfgmgr_ifix.tar.Z
References
IBM AIX CFGMGR Local Privilege Escalation and Arbitrary File Overwrite Vulnerabilities
References:
References:
- AIX Homepage (IBM)