CVE-2012-2179
IBM AIX 5.3, 6.1, 7.1 - Arbitrary File Write via Symlink Attack on Temporary File
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-2179.
AI-analyzed exploit summary The exploit demonstrates a privilege escalation vulnerability in IBM AIX by leveraging a race condition in libodm. It creates a symlink to a target file, exploiting a time-of-check, time-of-use (TOCTOU) race to achieve arbitrary file writes with elevated privileges.
Description
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
Exploits (1)
The exploit demonstrates a privilege escalation vulnerability in IBM AIX by leveraging a race condition in libodm. It creates a symlink to a target file, exploiting a time-of-check, time-of-use (TOCTOU) race to achieve arbitrary file writes with elevated privileges.