| Package | Affected versions | Patched versions |
|---|---|---|
| vios | = 2.2.0.10= 2.2.0.11= 2.2.0.12= 2.2.0.13= 2.2.1.0= 2.2.1.1= 2.2.1.3= 2.2.1.4= 2.2.1.8= 2.2.1.9= 2.2.2.0= 2.2.2.4= 2.2.2.5= 2.2.3.0= 2.2.3.2= 2.2.3.3 |
The runtime linker in IBM AIX 6.1 and 7.1 and VIOS 2.2.x allows local users to create a mode-666 root-owned file, and consequently gain privileges, by setting crafted MALLOCOPTIONS and MALLOCBUCKETS environment-variable values and then executing a setuid program.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free