Description
The nddstat programs on IBM AIX 5.2, 5.3, and 6.1 do not properly handle environment variables, which allows local users to gain privileges by invoking (1) atmstat, (2) entstat, (3) fddistat, (4) hdlcstat, or (5) tokstat.
References
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4157
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4156
- IZ16975 vendor-advisory
- 1019604 vdb-entry
- oval:org.mitre.oval:def:5468 vdb-entry signature
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4158
- IZ17058 vendor-advisory
- IZ17059 vendor-advisory
- IZ16991 vendor-advisory
- ADV-2008-0865 vdb-entry