Description
lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2) lslv in a certain directory that is under the user's control, which cause lsfs to access the programs in that directory.
References
- IY16909 vendor-advisory
- VU#123651 third-party-advisory
- 5582 vdb-entry
- aix-lsfs-path(7007) vdb-entry