58 matches found
CVE-2022-36768
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to obtain root privileges. IBM X-Force ID: 232014...
PT-2022-23612 · Ibm · Ibm Aix +1
Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: A vulnerability exists in the invscout command that could allow a non-privileged local user to obtain root privileges. Recommendations: For IBM AIX versions 7.1 through 7.3,...
IBM AIX 5.x Invscout Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13909/info invscout is prone to a local buffer overflow vulnerability. This issue presents itself because the application fails to carry out boundary checks on user-supplied data from the command line. /usr/sbin/invscout...
AIX <= 5.3.0 (invscout) Local Command Execution Vulnerability
No description provided by source. !/usr/bin/sh r00t exploit written for the invscout bug reported by Idefense labs http://www.idefense.com/application/poi/display?id=171&type=vulnerabilities coded by ri0t exploitation is trivial but automated with this script www.ri0tnet.net usage ./getr00t.sh :...
AIX 710000 : U842750
The remote host is missing AIX PTF U842750 which is related to the security of the package invscout.rte.2.2.0.17 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
AIX <= 5.3.0 (invscout) Local Command Execution Vulnerability
No description provided by source. !/usr/bin/sh r00t exploit written for the invscout bug reported by Idefense labs http://www.idefense.com/application/poi/display?id=171&type=vulnerabilities coded by ri0t exploitation is trivial but automated with this script www.ri0tnet.net usage ./getr00t.sh :...
Design/Logic Flaw
Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final substring of a hostname alias, as demonstrated by hostnames ending in "unix"...
CVE-2007-4798
CVE-2007-4798 affects IBM AIX 5.2 and 5.3 (invscout.rte) through an unspecified vulnerability in invscout that allows local users to delete system files whose names match the final substring of a hostname alias, demonstrated by hostnames ending in "unix". The provided documents do not give root-c...
CVE-2005-2232
The CVE-2005-2232 entry describes a buffer overflow in invscout on IBM AIX 5.1.0 through 5.3.0 that could let local users execute arbitrary code via a long command line argument. This is supported by multiple connected records (Red Hat and NVD references) confirming the same affected product and ...
Multiple AIX privilege escalations
invscout, diagTasksWebSM, getlvname utilities buffer overflows...
IBM AIX 5.x - Invscout Local Buffer Overflow
IBM AIX 5.x - Invscout Local Buffer Overflow source: https://www.securityfocus.com/bid/13909/info invscout is prone to a local buffer overflow vulnerability. This issue presents itself because the application fails to carry out boundary checks on user-supplied data from the command line...
IBM AIX 5.x - 'Invscout' Local Buffer Overflow
source: https://www.securityfocus.com/bid/13909/info invscout is prone to a local buffer overflow vulnerability. This issue presents itself because the application fails to carry out boundary checks on user-supplied data from the command line. /usr/sbin/invscout perl -e 'print "A" x 1024;'...
AIX 5.3.0 - 'invscout' Local Command Execution
!/usr/bin/sh r00t exploit written for the invscout bug reported by Idefense labs http://www.idefense.com/application/poi/display?id=171&type=vulnerabilities coded by ri0t exploitation is trivial but automated with this script www.ri0tnet.net usage ./getr00t.sh : exploitation gives euidroot from...
AIX 5.3.0 - invscout Local Command Execution
AIX 5.3.0 - invscout Local Command Execution !/usr/bin/sh r00t exploit written for the invscout bug reported by Idefense labs http://www.idefense.com/application/poi/display?id=171&type=vulnerabilities coded by ri0t exploitation is trivial but automated with this script www.ri0tnet.net usage...
AIX <= 5.3.0 (invscout) Local Command Execution Vulnerability
Exploit for aix platform in category local exploits ============================================================= AIX uname echo '/usr/bin/chown root:system ./ksh' uname echo '/usr/bin/chmod 777 ./ksh' uname echo '/usr/bin/chmod +s ./ksh' uname /usr/bin/chmod 777 uname PATH=./ export PATH...
getr00t.sh
!/usr/bin/sh r00t exploit written for the invscout bug reported by Idefense labs http://www.idefense.com/application/poi/display?id=171&type=vulnerabilities coded by ri0t exploitation is trivial but automated with this script www.ri0tnet.net usage ./getr00t.sh : exploitation gives euidroot from...
CVE-2004-1054
CVE-2004-1054 – IBM AIX invscout Local Command Execution involves a local privilege escalation in invscout on AIX 5.1.0/5.2.0/5.3.0 where an untrusted PATH can cause a malicious binary named ‘uname’ to be used by lsvpd, allowing an attacker to gain root. The attack relies on not dropping privileg...
[Full-Disclosure] iDEFENSE Security Advisory 12.20.04: IBM AIX invscout Local Command Execution Vulnerability
IBM AIX invscout Local Command Execution Vulnerability iDEFENSE Security Advisory 12.20.04 www.idefense.com/application/poi/display?id=171&type=vulnerabilities December 20, 2004 I. BACKGROUND The invscout program is a setuid root application, installed by default under newer versions of IBM AIX,...