IBM AIX 5.3/6.1/7.1/7.2 - 'lquerylv' Privilege Escalation Exploit

Exploit for linux platform in category local exploits !/usr/bin/sh AIX lquerylv 5.3, 6.1, 7.1, 7.2 local root exploit. Tested against latest patchset 7100-04 This exploit takes advantage of known issues with debugging functions within the AIX linker library. We are taking advantage of known...

AIX 5.3 / 6.1 / 7.1 / 7.2 lquerylv Local Root

!/usr/bin/sh AIX lquerylv 5.3, 6.1, 7.1, 7.2 local root exploit. Tested against latest patchset 7100-04 This exploit takes advantage of known issues with debugging functions within the AIX linker library. We are taking advantage of known functionality, and focusing on badly coded SUID binaries...

IBM AIX 5.3/6.1/7.1/7.2 - 'lquerylv' Local Privilege Escalation

!/usr/bin/sh AIX lquerylv 5.3, 6.1, 7.1, 7.2 local root exploit. Tested against latest patchset 7100-04 This exploit takes advantage of known issues with debugging functions within the AIX linker library. We are taking advantage of known functionality, and focusing on badly coded SUID binaries...

unix ibstat $PATH环境变量 权限提升漏洞

No description provided by source...

ibstat $PATH - Local Privilege Escalation (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class Metasploit4 "ibstat $PATH Privilege Escalation", "Description" = %q This module exploits the trusted $PATH environment variable of the SUID binary "ibstat". , "Autho...

ibstat $PATH Privilege Escalation

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class Metasploit4 "ibstat $PATH Privilege Escalation", "Description" = %q This module exploits the trusted $PATH environment variable of the SUID binary "ibstat". , "Autho...

AIX 7.1 TL 1 : devices.common.IBM.ib.rte (U855867)

The remote host is missing AIX PTF U855867, which is related to the security of the package devices.common.IBM.ib.rte. Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority. %NASLMINLEVEL 70300 C...

AIX 7.1 TL 2 : devices.common.IBM.ib.rte (U857552)

The remote host is missing AIX PTF U857552, which is related to the security of the package devices.common.IBM.ib.rte. Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority. %NASLMINLEVEL 70300 C...

AIX 6.1 TL 8 : devices.common.IBM.ib.rte (U855978)

The remote host is missing AIX PTF U855978, which is related to the security of the package devices.common.IBM.ib.rte. Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority. %NASLMINLEVEL 70300 C...

AIX 7.1 TL 0 : infiniband (IV43562)

Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory infinibandadvisory.asc...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to gain privileges via vectors involving 1 arp.ib or 2 ibstat...

CVE-2013-4011

CVE-2013-4011 affects IBM AIX 6.1/7.1 (and VIOS 2.2.2.2-FP-26 SP-02) InfiniBand subsystem components, enabling local privilege escalation via vulnerable paths in ibstat and arp.ib. Public references describe local-root escalation through a trusted SUID ibstat-based workflow and list related explo...

CVE-2013-4011: Undefined Security Weakness

Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to gain privileges via vectors involving 1 arp.ib or 2 ibstat...

PT-2013-4787

Name of the Vulnerable Software and Affected Versions IBM AIX versions 6.1 and 7.1 VIOS version 2.2.2.2-FP-26 SP-02 Description The issue involves multiple unspecified vulnerabilities in the InfiniBand subsystem, allowing local users to gain privileges. The vulnerabilities can be exploited throug...

IBM AIX ibstat权限提升漏洞

IBM AIX是一款商业性质的操作系统 IBM AIX ibstat程序存在一个未明错误，允许本地攻击者利用漏洞获得root权限 0 IBM AIX 6.1 IBM AIX 7.1 厂商解决方案 用户可参考如下厂商提供的安全公告获得补丁信息： http://www-01.ibm.com/support/docview.wss?uid=isg1IV43106 http://www-01.ibm.com/support/docview.wss?uid=isg1IV43539 http://www-01.ibm.com/support/docview.wss?uid=isg1IV43561...

Buffer overflow

Buffer overflow in ibstat in devices.common.IBM.ib.rte in IBM AIX 5.3 allows local users to gain privileges via unspecified vectors...

CVE-2007-4792

CVE-2007-4792 describes a buffer overflow in ibstat within devices.common.IBM.ib.rte on IBM AIX 5.3, enabling local users to gain privileges via unspecified vectors. The vulnerability is tied to the IBM AIX 5.3 environment and specifically affects the ibstat component of the devices.common.IBM.ib...

CVE-2007-4792: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in ibstat in devices.common.IBM.ib.rte in IBM AIX 5.3 allows local users to gain privileges via unspecified vectors...