EUVD-2004-1026

Malware in sbrugna...

There is a vulnerability in the AIX IBM Java 6 SDK installp and updatep packages

IBM SECURITY ADVISORY First Issued: Mon Sep 18 09:05:13 CDT 2017 |Updated: Mon Oct 2 09:00:12 CDT 2017 |Update 1: Impacted fileset information and iFixes added for AIX Java 6 | VRMFs from 6.0.0.215 to 6.0.0.465. | Complete impacted filesets now listed as: | Java6.sdk: 6.0.0.215-6.0.0.645 |...

CVE-2004-1028

CVE-2004-1028 describes a local privilege-escalation in IBM AIX chcod. The setuid root chcod on AIX 5.1.0/5.2.0/5.3.0 trusts PATH and invokes an external program named “grep.” If a local attacker can place a malicious grep in a directory in PATH and run chcod, arbitrary code could be executed wit...