|
AIX 'lsfs' Local Privilege Escalation Vulnerability
The lsfs utility, for IBM's AIX operating system, contains a vulnerability which could allow a malicious user to execute commands with elevated privileges. The problem occurs due to the implicit location defined when executing other system utlities. By modifying shell environment it may be possible for the attacker to trick lsfs into running the attacker-supplied binary. As lsfs is installed setuid 'root', all commands executed using the described method would be done so with superuser privileges. |
|
 Privacy Statement |
