IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with root privileges due to improper initialization of critical variables.
The product initializes critical internal variables or data stores using inputs that can be modified by untrusted actors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Vios | Ibm | 3.1 (including) | 3.1 (including) |
| Vios | Ibm | 4.1 (including) | 4.1 (including) |
| Aix | Ibm | 7.2 (including) | 7.2 (including) |
| Aix | Ibm | 7.3 (including) | 7.3 (including) |