IBM AIX CVE-2014-8904 Local Privilege Escalation Vulnerability

Bugtraq ID:	73209
Class:	Design Error
CVE:	CVE-2014-8904
Remote:	No
Local:	Yes
Published:	Mar 13 2015 12:00AM
Updated:	Mar 13 2015 12:00AM
Credit:	An anonymous researcher working with Beyond Security's SecuriTeam Secure Disclosure project.
Vulnerable:	IBM Vios 2.2.1 4 IBM Vios 2.2 IBM Vios 2.2.3.4 IBM Vios 2.2.3.3 IBM Vios 2.2.3.2 IBM Vios 2.2.3.0 IBM Vios 2.2.2.5 IBM Vios 2.2.2.4 IBM Vios 2.2.2.0 IBM Vios 2.2.1.9 IBM Vios 2.2.1.8 IBM Vios 2.2.1.3 IBM Vios 2.2.1.1 IBM Vios 2.2.1.0 IBM Vios 2.2.0.13 IBM Vios 2.2.0.12 IBM Vios 2.2.0.11 IBM Vios 2.2.0.10 IBM AIX 7.1 IBM AIX 6.1 IBM AIX 5.3
Not Vulnerable:

IBM AIX CVE-2014-8904 Local Privilege Escalation Vulnerability

IBM AIX is prone to a local privilege-escalation vulnerability.

An attacker can exploit this issue to gain root privileges.

IBM AIX CVE-2014-8904 Local Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM AIX CVE-2014-8904 Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM AIX CVE-2014-8904 Local Privilege Escalation Vulnerability

References:

• AIX Homepage (IBM)
  
• AIX cmdlvm vulnerability (IBM)
  
• IV67908: LQUERYLV SECURITY VULNERABILITY (CVE-2014-8904) (IBM)
  
• IV68070: LQUERYLV SECURITY VULNERABILITY (CVE-2014-8904) (IBM)
  
• IV68082: LQUERYLV SECURITY VULNERABILITY (CVE-2014-8904) (IBM)
  
• IV68478: LQUERYLV SECURITY VULNERABILITY (CVE-2014-8904) (IBM)