EUVD-2006-1250

Malware in sbrugna...

IBM AIX mklvcopy工具本地权限提升漏洞

IBM AIX是一款商业性质的UNIX操作系统。 IBM AIX 5.3所带的mklvcopy程序用来增加逻辑卷中每个逻辑分区的拷贝数，它默认设置了suid root属性，允许system组用户执行。 mklvcopy在调用外部命令时存在安全漏洞，允许一个本地攻击者以root身份执行任意命令。成功利用这个漏洞需要攻击者首先获取system组权限。 IBM AIX 5.3 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 取消mklvocpy的suid root属性 chmod a-s /usr/sbin/mklvcopy 厂商补丁： IBM -...

NSFOCUS SA2006-02 : IBM AIX mklvcopy Local Privilege Escalation Vulnerability

NSFOCUS Security Advisory SA2006-02 IBM AIX mklvcopy Local Privilege Escalation Vulnerability Release Date: 2006-04-24 CVE ID: CVE-2006-1246 http://www.nsfocus.com/english/homepage/research/0602.htm Affected systems & software =================== IBM AIX 5.3 Unaffected systems & software...

AIX mklvcopy vulnerability

Insecure external application execution by relative path...

Xxe

Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due to an untrusted search path vulnerability...

CVE-2006-1246

Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due to an untrusted search path vulnerability...

CVE-2006-1246

Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due to an untrusted search path vulnerability...

CVE-2006-1246

CVE-2006-1246 affects IBM AIX 5.3 where the mklvcopy tool in BOS.RTE.LVM calls external commands while running with suid root, enabling a local privilege escalation to root. NSFOCUS SA2006-02 details that an attacker with local system group privileges can exploit the vulnerability to execute arbi...

[SA19235] AIX "mklvcopy" Command Unspecified Vulnerability

TITLE: AIX "mklvcopy" Command Unspecified Vulnerability SECUNIA ADVISORY ID: SA19235 VERIFY ADVISORY: http://secunia.com/advisories/19235/ CRITICAL: Less critical IMPACT: Unknown WHERE: Local system OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: A vulnerability has been...