PT-2016-3250 · Ibm · Aix+1

Hxmonsegur · Publicado 2016-10-31 · Atualizado 2021-08-31 · CVE-2016-6079

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.3 through 7.2

Description The issue is related to the Logical Volume Manager (LVM) system in AIX, which has inadequate access control. This allows a locally authenticated user to potentially gain root level privileges by exploiting the vulnerability, possibly using the lquerylv command.

Recommendations For IBM AIX versions 5.3 through 7.2, apply the fixes according to IBM APARs: IV88658, IV87981, IV88419, IV87640, IV88053 to resolve the issue. As a temporary workaround, consider restricting access to the LVM system until a patch is applied.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2018-00382

CVE-2016-6079

Produtos afetados

Aix

Ibm Aix

Referências · 8

• 🔥 https://exploit-db.com/exploits/40710 · Exploit
• https://bdu.fstec.ru/vul/2018-00382 · Nota de Segurança
• https://t.me/cvenotify/20448 · Publicação no Telegram
• http://aix.software.ibm.com/aix/efixes/security/lquerylv_advisory.asc · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-6079 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-6079 · Nota de Segurança
• http://securitytracker.com/id/1037256 · Nota
• http://securityfocus.com/bid/94090 · Nota