CVE-1999-0064

Buffer overflow in AIX lquerylv program gives root access to local users...

EUVD-1999-0064

Malware in sbrugna...

The vulnerability of the LVM system for managing logical volumes in the AIX operating system allows a hacker to gain root privileges.

The vulnerability of the LVM Logical Volume Manager system in the AIX operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating locally, to gain root privileges using the lquerylv command...

Vulnerability in lquerylv in LVM impacts AIX,Vulnerability in lquerylv in LVM impacts VIOS

IBM SECURITY ADVISORY First Issued: Mon Nov 7 10:35:13 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/lquerylvadvisory.asc https://aix.software.ibm.com/aix/efixes/security/lquerylvadvisory.asc...

IBM AIX lquerylv Local Privilege Vulnerability

IBM AIX Advanced Interactive eXecutive is a UNIX operating system developed by IBM. A local privilege exploit exists in the lquerylv program in several versions of IBM AIX, which can be exploited by an attacker to execute arbitrary code and gain administrator privileges...

IBM AIX 5.36.17.17.2 - lquerylv Local Privilege Escalation

IBM AIX 5.36.17.17.2 - lquerylv Local Privilege Escalation !/usr/bin/sh AIX lquerylv 5.3, 6.1, 7.1, 7.2 local root exploit. Tested against latest patchset 7100-04 This exploit takes advantage of known issues with debugging functions within the AIX linker library. We are taking advantage of known...

IBM AIX 5.3/6.1/7.1/7.2 - 'lquerylv' Privilege Escalation Exploit

Exploit for linux platform in category local exploits !/usr/bin/sh AIX lquerylv 5.3, 6.1, 7.1, 7.2 local root exploit. Tested against latest patchset 7100-04 This exploit takes advantage of known issues with debugging functions within the AIX linker library. We are taking advantage of known...

AIX 5.3 / 6.1 / 7.1 / 7.2 lquerylv Local Root

!/usr/bin/sh AIX lquerylv 5.3, 6.1, 7.1, 7.2 local root exploit. Tested against latest patchset 7100-04 This exploit takes advantage of known issues with debugging functions within the AIX linker library. We are taking advantage of known functionality, and focusing on badly coded SUID binaries...

IBM AIX 5.3/6.1/7.1/7.2 - 'lquerylv' Local Privilege Escalation

!/usr/bin/sh AIX lquerylv 5.3, 6.1, 7.1, 7.2 local root exploit. Tested against latest patchset 7100-04 This exploit takes advantage of known issues with debugging functions within the AIX linker library. We are taking advantage of known functionality, and focusing on badly coded SUID binaries...

AIX 6.1 TL 9 : lquerylv (IV87981)

https://vulners.com/cve/CVE-2016-6079 https://vulners.com/cve/CVE-2016-6079 AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from...

AIX 7.1 TL 3 : lquerylv (IV88419)

https://vulners.com/cve/CVE-2016-6079 https://vulners.com/cve/CVE-2016-6079 AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from...

AIX 5.3 TL 12 : lquerylv (IV88658)

https://vulners.com/cve/CVE-2016-6079 https://vulners.com/cve/CVE-2016-6079 AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from...

AIX 7.2 TL 0 : lquerylv (IV88053)

https://vulners.com/cve/CVE-2016-6079 https://vulners.com/cve/CVE-2016-6079 AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from...

PT-2016-3250

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.3 through 7.2 Description The issue is related to the Logical Volume Manager LVM system in AIX, which has inadequate access control. This allows a locally authenticated user to potentially gain root level privileges by...

AIX 7.1 - lquerylv Local Privilege Escalation

AIX 7.1 - lquerylv Local Privilege Escalation !/bin/sh Exploit Title: AIX 7.1 lquerylv privilege escalation Date: 2015.10.30 Exploit Author: S2 Crew Hungary Vendor Homepage: www.ibm.com Software Link: - Version: - Tested on: AIX 7.1 7100-02-03-1334 CVE : CVE-2014-8904 From file writing to command...

AIX 7.1 - lquerylv Local Privilege Escalation Vulnerability

Exploit for aix platform in category local exploits !/bin/sh Exploit Title: AIX 7.1 lquerylv privilege escalation Date: 2015.10.30 Exploit Author: S2 Crew Hungary Vendor Homepage: www.ibm.com Software Link: - Version: - Tested on: AIX 7.1 7100-02-03-1334 CVE : CVE-2014-8904 From file writing to...

AIX 7.1 - 'lquerylv' Local Privilege Escalation

!/bin/sh Exploit Title: AIX 7.1 lquerylv privilege escalation Date: 2015.10.30 Exploit Author: S2 Crew Hungary Vendor Homepage: www.ibm.com Software Link: - Version: - Tested on: AIX 7.1 7100-02-03-1334 CVE : CVE-2014-8904 From file writing to command execution ; export DBGCMDLQUERYLV=1 umask 0 l...

AIX 6.1 TL 8 : bos.rte.lvm (U868378)

The remote host is missing AIX PTF U868378, which is related to the security of the package bos.rte.lvm. The running of lquerylv command with variable DBGCMDLQUERYLV set may allow a local user to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

IBM AIX and VIOS Elevation of Privilege Vulnerability

IBM AIX is a UNIX operating system; VIOS is a virtual IO server. An elevation of privilege vulnerability exists in lquerylv in cmdlvm in IBM AIX and VIOS. A local attacker can exploit the DBGCMDLQUERYLV environment variable to elevate privileges...

CVE-2014-8904: Undefined Security Weakness

lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCMDLQUERYLV environment-variable value...