Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-3977. PoCs published by Portcullis.
AI-analyzed exploit summary The exploit demonstrates a privilege escalation vulnerability in IBM AIX by leveraging a race condition in libodm. It creates a symlink to a target file (e.g., /etc/pwned) and exploits a time-of-check, time-of-use (TOCTOU) race to achieve arbitrary file writes with elevated privileges.
Description
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on a temporary file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2179.
Exploits (1)
The exploit demonstrates a privilege escalation vulnerability in IBM AIX by leveraging a race condition in libodm. It creates a symlink to a target file (e.g., /etc/pwned) and exploits a time-of-check, time-of-use (TOCTOU) race to achieve arbitrary file writes with elevated privileges.