IBM AIX named8工具本地权限提升漏洞

IBM AIX是一款商业性质的UNIX操作系统。 AIX的named8工具实现上存在漏洞，本地system组的攻击者可能利用此漏洞以root用户权限执行任意指令从而导致权限提升。 IBM AIX 5.3 IBM AIX 5.2 临时解决方法： 删除setuid root位： chmod 550 /usr/sbin/named8 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.ibm.com/servers/eserver/support/unixservers/aixfixes.html...

IBM AIX utilities multiple security vulnerabilities

Xclock buffer overflow; utape, cfgmgr, rdist, uucp, snappd, named8 and mkvg privilege escalation; slip.login and Inventory Scout arbitrary file overwrite...

CVE-2006-5003

Unspecified vulnerability in the named8 command in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands via unspecified vectors...

CVE-2006-5003

CVE-2006-5003 affects IBM AIX 5.2.0 and 5.3.0, via the named8 command. The vulnerability allows local users to execute arbitrary commands due to an unspecified flaw in the named8 component. No concrete vectors, root cause details, affected package versions beyond what is stated, or remediation in...

[SA22102] IBM AIX named8 Privilege Escalation Vulnerability

TITLE: IBM AIX named8 Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA22102 VERIFY ADVISORY: http://secunia.com/advisories/22102/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: A vulnerabili...