CVE-2016-6079

HIGH

IBM AIX <7.3 - Privilege Escalation

Title source: llm

Description

IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. IBM APARs: IV88658, IV87981, IV88419, IV87640, IV88053.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Hector X. Monsegur · bashlocalaix

https://www.exploit-db.com/exploits/40710

View Code ZIP pw:eip

References (4)

[Mitigation, Patch, Vendor Advisory] http://aix.software.ibm.com/aix/efixes/security/lquerylv_advisory.asc

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1037256

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/94090

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/40710/

Scores

CVSS v3 7.8

EPSS 0.0205

EPSS Percentile 83.9%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-264

Status published

Products (47)

ibm/aix 5.3

ibm/aix 6.1

ibm/aix 7.1

ibm/aix 7.2

ibm/vios 2.2.0.0

ibm/vios 2.2.0.10

ibm/vios 2.2.0.11

ibm/vios 2.2.0.12

ibm/vios 2.2.0.13

ibm/vios 2.2.1.0

... and 37 more

Published Feb 15, 2017

Tracked Since Feb 18, 2026