lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2) lslv in a certain directory that is under the user's control, which cause lsfs to access the programs in that directory.
References
Link | Resource |
---|---|
http://archives.neohapsis.com/archives/aix/2001-q2/0000.html | Exploit Patch Vendor Advisory |
http://www.kb.cert.org/vuls/id/123651 | US Government Resource |
http://www.osvdb.org/5582 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/7007 | |
http://archives.neohapsis.com/archives/aix/2001-q2/0000.html | Exploit Patch Vendor Advisory |
http://www.kb.cert.org/vuls/id/123651 | US Government Resource |
http://www.osvdb.org/5582 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/7007 |
Configurations
History
20 Nov 2024, 23:35
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.neohapsis.com/archives/aix/2001-q2/0000.html - Exploit, Patch, Vendor Advisory | |
References | () http://www.kb.cert.org/vuls/id/123651 - US Government Resource | |
References | () http://www.osvdb.org/5582 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/7007 - |
Information
Published : 2001-08-02 04:00
Updated : 2025-04-03 01:03
NVD link : CVE-2001-0573
Mitre link : CVE-2001-0573
CVE.ORG link : CVE-2001-0573
JSON object : View
Products Affected
ibm
- aix
CWE