First published: Thu Aug 02 2001(Updated: )
lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2) lslv in a certain directory that is under the user's control, which cause lsfs to access the programs in that directory.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
IBM AIX | =4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2001-0573 has a medium severity, as it allows local users to gain additional privileges.
To fix CVE-2001-0573, ensure that proper permissions are set on directories to prevent malicious executable creation.
CVE-2001-0573 affects users of IBM AIX version 4.x.
Systems running IBM AIX 4.x are vulnerable to CVE-2001-0573.
CVE-2001-0573 cannot be exploited remotely as it requires local user access to the system.