EUVD-2001-0565

Malware in sbrugna...

CVE-2001-0573

The CVE-2001-0573 issue affects IBM AIX lsfs (4.x) where a local user can gain root by placing Trojan horse programs named grep or lslv in a directory under their control. lsfs uses relative pathnames and invokes grep/lslv; if lsfs is setuid root, the attacker’s local binaries will run with root ...

IBM AIX lsfs utility invokes grep and lslv with relative pathnames

Overview The IBM AIX operating system contains a vulnerability in the lsfs utility that allows a local user to execute arbitrary code as root. Description The IBM AIX lsfs utility displays filesystem information such as mount points, permissions and volume sizes. To list this information, it...