Exploitation Summary
EIP tracks 1 public exploit for CVE-2013-5467. PoCs published by Robert Jaroszuk.
AI-analyzed exploit summary This exploit leverages a privilege escalation vulnerability in IBM Tivoli Monitoring V6.2.2 by injecting a malicious shared library (libcrypt.so.1) that overrides glibc functions to spawn a root shell. The exploit compiles a C program with a constructor that escalates privileges and executes /bin/sh.
Description
Monitoring Agent for UNIX Logs 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, and 6.2.3 through FP04 and Monitoring Server (ms) and Shared Libraries (ax) 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP08, 6.2.3 through FP01, and 6.3.0 through FP01 in IBM Tivoli Monitoring (ITM) on UNIX allow local users to gain privileges via unspecified vectors.
Exploits (1)
This exploit leverages a privilege escalation vulnerability in IBM Tivoli Monitoring V6.2.2 by injecting a malicious shared library (libcrypt.so.1) that overrides glibc functions to spawn a root shell. The exploit compiles a C program with a constructor that escalates privileges and executes /bin/sh.