CVE-2013-4011
IBM AIX 6.1/7.1 & VIOS 2.2.2.2-FP-26 SP-02 - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2013-4011.
PoCs published by Metasploit, Kristian Erik Hermansen, including Metasploit module exploits/aix/local/ibstat_path.
AI-analyzed exploit summary This Metasploit module exploits a trusted $PATH environment variable vulnerability in the SUID binary 'ibstat' on IBM AIX systems to escalate privileges to root. It creates a malicious 'arp' script and a SUID root shell binary to gain elevated access.
Description
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to gain privileges via vectors involving (1) arp.ib or (2) ibstat.
Exploits (3)
This Metasploit module exploits a trusted $PATH environment variable vulnerability in the SUID binary 'ibstat' on IBM AIX systems to escalate privileges to root. It creates a malicious 'arp' script and a SUID root shell binary to gain elevated access.
This exploit leverages a vulnerability in IBM AIX's ibstat command to escalate privileges to root by manipulating the PATH environment variable to execute a malicious script. The script copies /bin/sh to a temporary location and sets the SUID bit, granting root access.
This Metasploit module exploits a trusted $PATH environment variable vulnerability in the SUID binary 'ibstat' on IBM AIX systems. It manipulates the PATH to execute a malicious 'arp' script, which then sets the SUID bit on a custom binary to escalate privileges to root.