CVE-2014-3074

Severity

72%

Complexity

39%

Confidentiality

165%

The runtime linker in IBM AIX 6.1 and 7.1 and VIOS 2.2.x allows local users to create a mode-666 root-owned file, and consequently gain privileges, by setting crafted MALLOCOPTIONS and MALLOCBUCKETS environment-variable values and then executing a setuid program.

The runtime linker in IBM AIX 6.1 and 7.1 and VIOS 2.2.x allows local users to create a mode-666 root-owned file, and consequently gain privileges, by setting crafted MALLOCOPTIONS and MALLOCBUCKETS environment-variable values and then executing a setuid program.

CVSS 2.0 Base Score 7.2. CVSS Attack Vector: local. CVSS Attack Complexity: low. CVSS Vector: (AV:L/AC:L/Au:N/C:C/I:C/A:C).

Overview

Type

IBM

First reported 10 years ago

2014-07-02 10:35:00

Last updated 6 years ago

2018-10-09 19:43:00

Affected Software

IBM AIX 6.1

6.1

IBM AIX 7.1

7.1

IBM VIOS 2.2.0.10

2.2.0.10

IBM VIOS 2.2.0.11

2.2.0.11

IBM VIOS 2.2.0.12

2.2.0.12

IBM VIOS 2.2.0.13

2.2.0.13

IBM VIOS 2.2.1.0

2.2.1.0

IBM VIOS 2.2.1.1

2.2.1.1

IBM VIOS 2.2.1.3

2.2.1.3

IBM VIOS 2.2.1.4

2.2.1.4

IBM VIOS 2.2.1.4-FP-25 SP-02 (Fix Pack 25 Service Pack 02)

2.2.1.4

IBM VIOS 2.2.1.8

2.2.1.8

IBM VIOS 2.2.1.9

2.2.1.9

IBM VIOS 2.2.2.0

2.2.2.0

IBM VIOS 2.2.2.4

2.2.2.4

IBM VIOS 2.2.2.5

2.2.2.5

IBM VIOS 2.2.3.0

2.2.3.0

IBM VIOS 2.2.3.2

2.2.3.2

IBM VIOS 2.2.3.3

2.2.3.3

References

http://aix.software.ibm.com/aix/efixes/security/malloc_advisory.asc

Vendor Advisory

http://packetstormsecurity.com/files/127390/IBM-AIX-Runtime-Linker-Privilege-Escalation.html

20140708 CVE-2014-3074 - Runtime Linker Allows Privilege Escalation Via Arbitrary File Writes in IBM AIX

59344

IV60935

Vendor Advisory

IV60940

Vendor Advisory

IV61311

Vendor Advisory

IV61313

Vendor Advisory

IV61314

Vendor Advisory

IV61315

Vendor Advisory

20140708 CVE-2014-3074 - Runtime Linker Allows Privilege Escalation Via Arbitrary File Writes in IBM AIX

68296

1030504

ibm-aix-cve20143074-priv-escalation(93816)

https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-3074/

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.