NSFOCUS SA2006-02 : IBM AIX mklvcopy Local Privilege Escalation Vulnerability

NSFOCUS Security Advisory SA2006-02 IBM AIX mklvcopy Local Privilege Escalation Vulnerability Release Date: 2006-04-24 CVE ID: CVE-2006-1246 http://www.nsfocus.com/english/homepage/research/0602.htm Affected systems & software =================== IBM AIX 5.3 Unaffected systems & software...

CVE-2006-1246

CVE-2006-1246 affects IBM AIX 5.3 where the mklvcopy tool in BOS.RTE.LVM calls external commands while running with suid root, enabling a local privilege escalation to root. NSFOCUS SA2006-02 details that an attacker with local system group privileges can exploit the vulnerability to execute arbi...