Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2009-2669
HistoryAug 05, 2009 - 7:30 p.m.

CVE-2009-2669

2009-08-0519:30:01
CWE-264
mitre
web.nvd.nist.gov
39
ibm aix
debugging
privilege escalation
vulnerability
nvd
cve-2009-2669

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

Low

EPSS

0

Percentile

9.7%

JSON

A certain debugging component in IBM AIX 5.3 and 6.1 does not properly handle the (1) _LIB_INIT_DBG and (2) _LIB_INIT_DBG_FILE environment variables, which allows local users to gain privileges by leveraging a setuid-root program to create an arbitrary root-owned file with world-writable permissions, related to libC.a (aka the XL C++ runtime library) in AIX 5.3 and libc.a in AIX 6.1.

Affected configurations

Nvd
Node
ibmaixMatch5.3
OR
ibmaixMatch6.1
VendorProductVersionCPE
ibmaix5.3cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*
ibmaix6.1cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*

Related

zdt 2
nessus 4
seebug 2
prion 1
cvelist 1
packetstorm 2
exploitpack 2
exploitdb 2
nvd 1
zdt
zdt
IBM AIX 5.6/6.1 _LIB_INIT_DBG Arbitrary File Overwrite via Libc Debug
2009-09-11 00:00:00
IBM AIX 5.3/6.1/7.1/7.2 - 'lquerylv' Privilege Escalation Exploit
2016-11-04 00:00:00
nessus
nessus
AIX 6.1 TL 2 : libC (IZ56205)
2013-01-30 00:00:00
AIX 6.1 TL 1 : libC (IZ56204)
2013-01-30 00:00:00
AIX 6.1 TL 0 : libC (IZ56203)
2013-01-30 00:00:00
seebug
seebug
IBM AIX 5.6/6.1 _LIB_INIT_DBG Arbitrary File Overwrite via Libc Debug
2009-09-14 00:00:00
IBM AIX 5.6/6.1 - _LIB_INIT_DBG Arbitrary File Overwrite via Libc Debug
2014-07-01 00:00:00
prion
prion
Design/Logic Flaw
2009-08-05 19:30:00
cvelist
cvelist
CVE-2009-2669
2009-08-05 19:00:00
packetstorm
packetstorm
IBM AIX 5.6/6.1 File Overwrite
2009-09-11 00:00:00
AIX 5.3 / 6.1 / 7.1 / 7.2 lquerylv Local Root
2016-11-04 00:00:00
exploitpack
exploitpack
IBM AIX 5.66.1 - _LIB_INIT_DBG Arbitrary File Overwrite via Libc Debug
2009-09-11 00:00:00
IBM AIX 5.36.17.17.2 - lquerylv Local Privilege Escalation
2016-11-04 00:00:00
exploitdb
exploitdb
IBM AIX 5.6/6.1 - '_LIB_INIT_DBG' Arbitrary File Overwrite via Libc Debug
2009-09-11 00:00:00
IBM AIX 5.3/6.1/7.1/7.2 - 'lquerylv' Local Privilege Escalation
2016-11-04 00:00:00
nvd
nvd
CVE-2009-2669
2009-08-05 19:30:01

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

Low

EPSS

0

Percentile

9.7%

JSON
Related for CVE-2009-2669
zdt2nessus4seebug2prion1cvelist1packetstorm2exploitpack2exploitdb2nvd1