Description
Director Agent 6.1 before 6.1.2.3 in IBM Systems Director on AIX and Linux uses incorrect permissions for the (1) diruninstall and (2) opt/ibm/director/bin/wcitinst scripts, which allows local users to gain privileges by executing these scripts.
References
- 39305 vdb-entry
- 39194 third-party-advisory
- systems-director-agent-sec-bypass(57611) vdb-entry
- 1023831 vdb-entry
- ADV-2010-0830 vdb-entry
- PM08236 vendor-advisory
- 63595 vdb-entry