Description
The lsmcode program on IBM AIX 5.2, 5.3, and 6.1 does not properly handle environment variables, which allows local users to gain privileges, a different vulnerability than CVE-2004-1329.
References
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4159
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4160
- IZ15100 vendor-advisory
- IZ15277 vendor-advisory
- IZ15276 vendor-advisory
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4161
- oval:org.mitre.oval:def:5566 vdb-entry signature
- IZ15057 vendor-advisory
- 1019603 vdb-entry
- ADV-2008-0865 vdb-entry