CVE-2006-0133
IBM AIX 5.3 ML03 - Local Directory Traversal via getCommand and getShell
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-0133. PoCs published by xfocus.
AI-analyzed exploit summary This exploit demonstrates a local vulnerability in IBM AIX's getShell and getCommand functions, allowing unauthorized read access to shell scripts. The PoC shows how an attacker can execute a script (/tmp/k.sh) to leak process information via a simple command injection.
Description
Multiple directory traversal vulnerabilities in AIX 5.3 ML03 allow local users to determine the existence of files and read partial contents of certain files via a .. (dot dot) in the argument to (1) getCommand.new (aka getCommand) and (2) getShell, a different vulnerability than CVE-2005-4273.
Exploits (2)
This exploit demonstrates a local vulnerability in IBM AIX's getShell and getCommand functions, allowing unauthorized read access to shell scripts. The PoC shows how an attacker can execute a script (/tmp/k.sh) to leak process information via a simple command injection.
This exploit demonstrates a local file enumeration vulnerability in IBM AIX's getShell and getCommand utilities. By attempting to access files via relative paths, attackers can infer file existence based on error messages.