lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 25 Sep 2013 06:57:03 -0700 (PDT)
From: Bacanu Adrian-Daniel <darkzatarra@...oo.com>
To: Kristian Erik Hermansen <kristian.hermansen@...il.com>,
 "full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk>
Subject: Re: IBM AIX 6.1 / 7.1 - Local root
	Privilege	Escalation

Hi AIXperts and friends,

I did some tests on this and it seems that the script is working pretty well.

Anyway, I found out that you need this package in order to run it:

devices.common.IBM.ib.rte

I have tested it on

7100-02-01-1245
6100-08-01-1245

and both were exploitable.

BR,
Adrian-Daniel Bacanu




________________________________
 From: Kristian Erik Hermansen <kristian.hermansen@...il.com>
To: "full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk> 
Sent: Tuesday, September 24, 2013 7:28 PM
Subject: [Full-disclosure] IBM AIX 6.1 / 7.1 - Local root Privilege	Escalation
 

Moin Moin :)

Does anyone have IBM AIX > v6.1 or VIOS to test?

http://www.exploit-db.com/exploits/28507/

http://s13.postimg.org/infiliq1z/aix_r00t_sh.png

Cheers,
-- 
Kristian Erik Hermansen
https://www.linkedin.com/in/kristianhermansen
https://profiles.google.com/kristian.hermansen

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists