Vulnerability in AIX sendmail

IBM SECURITY ADVISORY First Issued: Mon Jul 16 13:28:25 CDT 2012 | Updated: Tue Sept 27 9:50:28 CDT 2012 | Update: New ifixes to include sendmailssl and sendmailnossl | Update: Corrected file names | Update: New ifixes for the latest SP's | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added...

CVE-2012-2200

The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain privileges by entering a command in a .forward file in a home directory...

CVE-2012-2200

The CVE-2012-2200 issue affects IBM AIX 6.1/7.1 (and VIOS 2.2.1.4-FP-25 SP-02) where the default sendmail configuration allows local users to gain root privileges by placing a command in a user’s .forward file. The root cause is execution of commands piped from the .forward mechanism within stock...