AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by modifying the path to point to a malicious hostname program.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Aix |
Ibm |
* |
4.2.1.12 (including) |
References