aix.software.ibm.comConfirmation
http://aix.software.ibm.com/aix/efixes/security/libc_advisory.asc CVE-2009-1786
Kingsoft Webshield 1.1.0.62 - Cross-Site Scripting / Remote Command Execution
Record summary
CVE-2009-1786 has a selected CVSS score of 6.9; EIP currently links 2 catalogued exploits and 1 curated repository PoC.
Description
The malloc subsystem in libc in IBM AIX 5.3 and 6.1 allows local users to create or overwrite arbitrary files via a symlink attack on the log file associated with the MALLOCDEBUG environment variable.
Description source: CVE List
Exploitation context
Proofs of concept
3Catalogued exploits
ExploitDBKingsoft Webshield 1.1.0.62 - Cross-Site Scripting / Remote Command ExecutionExploitDB exploitby inkingNot analyzed1 file
ExploitDBIBM AIX 5.3 - 'libc' MALLOCDEBUG File OverwriteExploitDB exploitby AffixNot analyzed1 file
Curated repository PoCs
GitHubCVE-2016-6079Curated repository PoCby RhinoSecurityLabsStars: 905Not analyzed3 files
References
Showing 12 of 1820090520 IBM AIX libc MALLOCDEBUG File Overwrite VulnerabilityThird-party advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=802 35146Third-party advisory
http://secunia.com/advisories/35146 1022261vdb entry
http://securitytracker.com/id?1022261 IZ50121Vendor advisory
http://www.ibm.com/support/docview.wss?uid=isg1IZ50121 IZ50129Vendor advisory
http://www.ibm.com/support/docview.wss?uid=isg1IZ50129 IZ50139Vendor advisory
http://www.ibm.com/support/docview.wss?uid=isg1IZ50139 IZ50445Vendor advisory
http://www.ibm.com/support/docview.wss?uid=isg1IZ50445 IZ50447Vendor advisory
http://www.ibm.com/support/docview.wss?uid=isg1IZ50447 IZ50500Vendor advisory
http://www.ibm.com/support/docview.wss?uid=isg1IZ50500 IZ50517Vendor advisory
http://www.ibm.com/support/docview.wss?uid=isg1IZ50517 54617vdb entry
http://www.osvdb.org/54617