full-disclosure - Re: IBM AIX 6.1 / 7.1 - Local root Privilege Escalation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <1380117423.35227.YahooMailNeo@web142604.mail.bf1.yahoo.com>
Date: Wed, 25 Sep 2013 06:57:03 -0700 (PDT)
From: Bacanu Adrian-Daniel <darkzatarra@...oo.com>
To: Kristian Erik Hermansen <kristian.hermansen@...il.com>,
 "full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk>
Subject: Re: IBM AIX 6.1 / 7.1 - Local root
	Privilege	Escalation

Hi AIXperts and friends,

I did some tests on this and it seems that the script is working pretty well.

Anyway, I found out that you need this package in order to run it:

devices.common.IBM.ib.rte

I have tested it on

7100-02-01-1245
6100-08-01-1245

and both were exploitable.

BR,
Adrian-Daniel Bacanu

________________________________
 From: Kristian Erik Hermansen <kristian.hermansen@...il.com>
To: "full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk> 
Sent: Tuesday, September 24, 2013 7:28 PM
Subject: [Full-disclosure] IBM AIX 6.1 / 7.1 - Local root Privilege	Escalation

Moin Moin :)

Does anyone have IBM AIX > v6.1 or VIOS to test?

http://www.exploit-db.com/exploits/28507/

http://s13.postimg.org/infiliq1z/aix_r00t_sh.png

Cheers,
-- 
Kristian Erik Hermansen
https://www.linkedin.com/in/kristianhermansen
https://profiles.google.com/kristian.hermansen

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/