IBM AIX Multiple Kernel and Command Privilege Escalation Vulnerabilities

Bugtraq ID:	28212
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Mar 11 2008 12:00AM
Updated:	Mar 12 2008 02:01AM
Credit:	The vendor disclosed these vulnerabilities.
Vulnerable:	IBM AIX 6.1 IBM AIX 5.3 IBM AIX 5.2
Not Vulnerable:

IBM AIX Multiple Kernel and Command Privilege Escalation Vulnerabilities

IBM AIX is prone to multiple privilege-escalation vulnerabilities.

A local attacker can exploit these issues to execute arbitrary code with superuser privileges; this will facilitate a complete compromise of the affected computer.

IBM AIX Multiple Kernel and Command Privilege Escalation Vulnerabilities

Some of these issues do not require specific exploit code.

IBM AIX Multiple Kernel and Command Privilege Escalation Vulnerabilities

Solution:
The vendor has released patches to address these issues. Please see the referenced advisories for more information.

IBM AIX Multiple Kernel and Command Privilege Escalation Vulnerabilities

References:

• AIX kernel multiple security vulnerabilities (IBM)
  
• AIX kernel multiple security vulnerabilities (IBM)
  
• AIX kernel multiple security vulnerabilities (IBM)
  
• AIX lsmcode environment variable error (IBM)
  
• AIX lsmcode environment variable error (IBM)
  
• AIX lsmcode environment variable error (IBM)
  
• AIX nddstat family environment variable error (IBM)
  
• AIX nddstat family environment variable error (IBM)
  
• AIX nddstat family environment variable error (IBM)
  
• AIX reboot buffer overflow (IBM)
  
• AIX reboot buffer overflow (IBM)