EUVD-2005-0262

Malware in sbrugna...

[Full-Disclosure] iDEFENSE Security Advisory 02.10.05: IBM AIX lspath Local File Access Vulnerability

IBM AIX lspath Local File Access Vulnerability iDEFENSE Security Advisory 02.10.05 www.idefense.com/application/poi/display?id=195&type=vulnerabilities February 10, 2005 I. BACKGROUND The lspath program is a setuid root application, installed by default under newer versions of IBM AIX. It is used...

Multiple IBM AIX utilities bugs

Buffer overflow, privilege escalation: iplvaryon, lspath, netpmon...

CVE-2005-0261

CVE-2005-0261 affects AIX 5.2, 5.3, and possibly earlier versions. The vulnerability arises because lspath does not drop privileges before processing the -f option, enabling a local user to read a single line from arbitrary files. The connected documents do not provide a patch version or explicit...