AIX 7.1 - 'lquerylv' Local Privilege Escalation

!/bin/sh Exploit Title: AIX 7.1 lquerylv privilege escalation Date: 2015.10.30 Exploit Author: S2 Crew Hungary Vendor Homepage: www.ibm.com Software Link: - Version: - Tested on: AIX 7.1 7100-02-03-1334 CVE : CVE-2014-8904 From file writing to command execution ; export DBGCMDLQUERYLV=1 umask 0 l...

AIX 7.1 - lquerylv Local Privilege Escalation

AIX 7.1 - lquerylv Local Privilege Escalation !/bin/sh Exploit Title: AIX 7.1 lquerylv privilege escalation Date: 2015.10.30 Exploit Author: S2 Crew Hungary Vendor Homepage: www.ibm.com Software Link: - Version: - Tested on: AIX 7.1 7100-02-03-1334 CVE : CVE-2014-8904 From file writing to command...

AIX 7.1 - lquerylv Local Privilege Escalation Vulnerability

Exploit for aix platform in category local exploits !/bin/sh Exploit Title: AIX 7.1 lquerylv privilege escalation Date: 2015.10.30 Exploit Author: S2 Crew Hungary Vendor Homepage: www.ibm.com Software Link: - Version: - Tested on: AIX 7.1 7100-02-03-1334 CVE : CVE-2014-8904 From file writing to...

AIX OpenSSH Advisory : openssh_advisory6.asc

The remote AIX host has a version of OpenSSH installed that is affected by the following vulnerabilities : - A flaw exists in the monitor component when handling extraneous username data in MONITORREQPAMINITCTX requests. A local attacker can exploit this issue to conduct an impersonation attack, ...

The vulnerability of the AIX operating system, which allows a perpetrator to increase their privileges

The vulnerability of the netstat component in the AIX operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow an attacker, who operates locally, to increase their privileges...

AIX OpenSSH Vulnerability

IBM SECURITY ADVISORY First Issued: Wed Oct 21 09:17:40 CDT 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory6.asc https://aix.software.ibm.com/aix/efixes/security/opensshadvisory6.asc...

CVE-2015-4948

netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors...

Code injection

netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors...

CVE-2015-4948

netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors...

CVE-2015-4948

CVE-2015-4948 affects IBM AIX 5.3, 6.1, 7.1 and VIOS 2.2.x; netstat in these releases can allow a local user to escalate privileges when a Fibre Channel adapter is present. Root cause: a netstat-related vulnerability. Public patch guidance is present (e.g., AIX PTFs/U867672, U861500; see IBM advi...

CVE-2015-4948

netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors...

AIX 7.1 TL 2 : netstat (IV77038)

IBM AIX could allow a local attacker to escalate their privileges to root access through a vulnerability in netstat when a fiber channel adapter is present. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory netstatadvisory.as...

AIX 7.1 TL 3 : netstat (IV77299)

IBM AIX could allow a local attacker to escalate their privileges to root access through a vulnerability in netstat when a fiber channel adapter is present. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory netstatadvisory.as...

AIX 6.1 TL 8 : netstat (IV77037)

IBM AIX could allow a local attacker to escalate their privileges to root access through a vulnerability in netstat when a fiber channel adapter is present. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory netstatadvisory.as...

AIX 5.3 TL 12 : netstat (IV77039)

IBM AIX could allow a local attacker to escalate their privileges to root access through a vulnerability in netstat when a fiber channel adapter is present. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory netstatadvisory.as...

AIX 6.1 TL 9 : netstat (IV75940)

IBM AIX could allow a local attacker to escalate their privileges to root access through a vulnerability in netstat when a fiber channel adapter is present. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory netstatadvisory.as...

Vulnerability in netstat affects AIX,Vulnerability in netstat affects VIOS

IBM SECURITY ADVISORY First Issued: Mon Oct 12 14:17:27 CDT 2015 |Updated: Fri Oct 16 16:41:29 CDT 2015 |Update: New iFixes provided The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/netstatadvisory.asc...

AIX 7.1 TL 2 : bos.rte.lvm (U867549)

The remote host is missing AIX PTF U867549, which is related to the security of the package bos.rte.lvm. The running of lquerylv command with variable DBGCMDLQUERYLV set may allow a local user to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

IBM PowerHA for AIX Local Privilege Vulnerability

IBM PowerHA for AIX is a set of solutions that enable systems to cope with failures and reduce application downtime. A local elevation of privilege vulnerability exists in IBM PowerHA for AIX, which allows an attacker to exploit the vulnerability to elevate privileges and gain root privileges...

AIX 6.1 TL 8 : bos.rte.lvm (U868378)

The remote host is missing AIX PTF U868378, which is related to the security of the package bos.rte.lvm. The running of lquerylv command with variable DBGCMDLQUERYLV set may allow a local user to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...