Description
AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by modifying the path to point to a malicious hostname program.
References
- aix-sysback-elevate-privileges(6432) vdb-entry
- VU#17566 third-party-advisory