Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due to an untrusted search path vulnerability.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM AIX mklvcopy工具本地权限提升漏洞
Vulnerability Description
IBM AIX是一款商业性质的UNIX操作系统。 IBM AIX 5.3所带的mklvcopy程序用来增加逻辑卷中每个逻辑分区的拷贝数,它默认设置了suid root属性,允许system组用户执行。 mklvcopy在调用外部命令时存在安全漏洞,允许一个本地攻击者以root身份执行任意命令。成功利用这个漏洞需要攻击者首先获取system组权限。
CVSS Information
N/A
Vulnerability Type
N/A