Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-8904. PoCs published by S2 Crew.
AI-analyzed exploit summary This exploit leverages a privilege escalation vulnerability in AIX 7.1 via the lquerylv command. It manipulates the _DBGCMD_LQUERYLV environment variable and symlink to write to /etc/suid_profile, then executes arbitrary commands with elevated privileges.
Description
lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCMD_LQUERYLV environment-variable value.
Exploits (1)
This exploit leverages a privilege escalation vulnerability in AIX 7.1 via the lquerylv command. It manipulates the _DBGCMD_LQUERYLV environment variable and symlink to write to /etc/suid_profile, then executes arbitrary commands with elevated privileges.