CVE-2008-1599

CVE-2008-1599 affects IBM AIX 5.2, 5.3, and 6.1. The nddstat family (atmstat, entstat, fddistat, hdlcstat, tokstat) handles environment variables insecurely, allowing a local user to gain root privileges via these setuid-root commands. Vulnerable files/paths include /usr/sbin/atmstat, /usr/sbin/e...