CVE-2000-0466

Affected software: AIX cdmount (part of UMS) on AIX systems. The issue arises from insecure handling of user-supplied arguments in cdmount, which spawns a shell to invoke the mount command with those arguments, allowing local users to execute arbitrary commands as root (SUID root wrapper). Impact...

ISSalert: Internet Security Systems Security Advisory: Insecure call of external program in AIX cdmount

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...

Дырка в AIX cdmount

cdmount вызывает внешнюю программу mount с привелегией root. Неправильная обработка параметра пользователя приводит к тому, что любое приложение может быть выполнено с привилегией root...

CVE-2000-0466

AIX cdmount allows local users to gain root privileges via shell metacharacters...