CVE-2009-2669

published 2009-08-05

CVE-2009-2669: A certain debugging component in IBM AIX 5.3 and 6.1 does not properly handle the (1) _LIB_INIT_DBG and (2) _LIB_INIT_DBG_FILE environment variables, which…

high 7.2 CVSS 3.1

AV L AC L Au N C C I C A C

EXPLOIT

A certain debugging component in IBM AIX 5.3 and 6.1 does not properly handle the (1) _LIB_INIT_DBG and (2) _LIB_INIT_DBG_FILE environment variables, which allows local users to gain privileges by leveraging a setuid-root program to create an arbitrary root-owned file with world-writable permissions, related to libC.a (aka the XL C++ runtime library) in AIX 5.3 and libc.a in AIX 6.1.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	aix	—	—
ibm	aix	—	—

CWE-264