IBM AIX Local Privilege Escalation and Security Bypass Vulnerabilities
BID:43207
Info
IBM AIX Local Privilege Escalation and Security Bypass Vulnerabilities
| Bugtraq ID: | 43207 |
| Class: | Unknown |
| CVE: |
CVE-2010-3405 CVE-2010-3406 |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 13 2010 12:00AM |
| Updated: | Apr 13 2015 09:05PM |
| Credit: | Lucas McLane. |
| Vulnerable: |
IBM AIX 6.1.5 IBM AIX 6.1.4 IBM AIX 6.1.3 IBM AIX 6.1.2 IBM AIX 5.3.10 IBM AIX 5.3.12 IBM AIX 5.3.11 |
| Not Vulnerable: | |
Discussion
IBM AIX Local Privilege Escalation and Security Bypass Vulnerabilities
IBM AIX is prone to a local privilege-escalation vulnerability and a security-bypass vulnerability.
Note: Attackers require system group permissions to exploit these issues.
Attackers can exploit these issues to execute arbitrary code using superuser privileges or to delete sensitive files from the system. Successful exploits will completely compromise affected computers.
IBM AIX is prone to a local privilege-escalation vulnerability and a security-bypass vulnerability.
Note: Attackers require system group permissions to exploit these issues.
Attackers can exploit these issues to execute arbitrary code using superuser privileges or to delete sensitive files from the system. Successful exploits will completely compromise affected computers.
Exploit / POC
IBM AIX Local Privilege Escalation and Security Bypass Vulnerabilities
Attackers can exploit these issues using readily available commands.
Attackers can exploit these issues using readily available commands.
Solution / Fix
IBM AIX Local Privilege Escalation and Security Bypass Vulnerabilities
Solution:
The vendor released an advisory and fixes. Please see the references for more information.
Solution:
The vendor released an advisory and fixes. Please see the references for more information.
References
IBM AIX Local Privilege Escalation and Security Bypass Vulnerabilities
References:
References:
- AIX Homepage (IBM)