IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with root privileges due to improper initialization of critical variables.
Weakness
The product initializes critical internal variables or data stores using inputs that can be modified by untrusted actors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Vios | Ibm | 3.1 (including) | 3.1 (including) |
| Vios | Ibm | 4.1 (including) | 4.1 (including) |
| Aix | Ibm | 7.2 (including) | 7.2 (including) |
| Aix | Ibm | 7.3 (including) | 7.3 (including) |