CVE-2014-3074

Severity Score

7.2

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The runtime linker in IBM AIX 6.1 and 7.1 and VIOS 2.2.x allows local users to create a mode-666 root-owned file, and consequently gain privileges, by setting crafted MALLOCOPTIONS and MALLOCBUCKETS environment-variable values and then executing a setuid program.

El enlazador en tiempo de ejecución en IBM AIX 6.1 y 7.1 y VIOS 2.2.x permite a usuarios locales crear un fichero propiedad de root modo 666, y como consecuencia ganar privilegios, mediante la configuración de valores variables de entorno MALLOCOPTIONS y MALLOCBUCKETS manipulados y luego la ejecución de un programa setuid.

*Credits: N/A

CVSS Scores

NISTv2 7.2

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2014-04-29 CVE Reserved
2014-07-02 CVE Published
2023-03-08 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-264: Permissions, Privileges, and Access Controls

CAPEC

References (15)

URL	Tag	Source
http://packetstormsecurity.com/files/127390/IBM-AIX-Runtime-Linker-Privilege-Escalation.html	X_refsource_misc
http://seclists.org/fulldisclosure/2014/Jul/31	Mailing List
http://secunia.com/advisories/59344	Third Party Advisory
http://www.securityfocus.com/archive/1/532689/100/0/threaded	Mailing List
http://www.securityfocus.com/bid/68296	Vdb Entry
http://www.securitytracker.com/id/1030504	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/93816	Vdb Entry
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-3074	X_refsource_misc

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://aix.software.ibm.com/aix/efixes/security/malloc_advisory.asc	2021-08-31
http://www.ibm.com/support/docview.wss?uid=isg1IV60935	2021-08-31
http://www.ibm.com/support/docview.wss?uid=isg1IV60940	2021-08-31
http://www.ibm.com/support/docview.wss?uid=isg1IV61311	2021-08-31
http://www.ibm.com/support/docview.wss?uid=isg1IV61313	2021-08-31
http://www.ibm.com/support/docview.wss?uid=isg1IV61314	2021-08-31
http://www.ibm.com/support/docview.wss?uid=isg1IV61315	2021-08-31

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Ibm Search vendor "Ibm"		Vios Search vendor "Ibm" for product "Vios"				2.2.0.10 Search vendor "Ibm" for product "Vios" and version "2.2.0.10"		-		Affected
Ibm Search vendor "Ibm"		Vios Search vendor "Ibm" for product "Vios"				2.2.0.11 Search vendor "Ibm" for product "Vios" and version "2.2.0.11"		-		Affected
Ibm Search vendor "Ibm"		Vios Search vendor "Ibm" for product "Vios"				2.2.0.12 Search vendor "Ibm" for product "Vios" and version "2.2.0.12"		-		Affected
Ibm Search vendor "Ibm"		Vios Search vendor "Ibm" for product "Vios"				2.2.0.13 Search vendor "Ibm" for product "Vios" and version "2.2.0.13"		-		Affected
Ibm Search vendor "Ibm"		Vios Search vendor "Ibm" for product "Vios"				2.2.1.0 Search vendor "Ibm" for product "Vios" and version "2.2.1.0"		-		Affected
Ibm Search vendor "Ibm"		Vios Search vendor "Ibm" for product "Vios"				2.2.1.1 Search vendor "Ibm" for product "Vios" and version "2.2.1.1"		-		Affected
Ibm Search vendor "Ibm"		Vios Search vendor "Ibm" for product "Vios"				2.2.1.3 Search vendor "Ibm" for product "Vios" and version "2.2.1.3"		-		Affected
Ibm Search vendor "Ibm"		Vios Search vendor "Ibm" for product "Vios"				2.2.1.4 Search vendor "Ibm" for product "Vios" and version "2.2.1.4"		-		Affected
Ibm Search vendor "Ibm"		Vios Search vendor "Ibm" for product "Vios"				2.2.1.4 Search vendor "Ibm" for product "Vios" and version "2.2.1.4"		fp-25_sp-02		Affected
Ibm Search vendor "Ibm"		Vios Search vendor "Ibm" for product "Vios"				2.2.1.8 Search vendor "Ibm" for product "Vios" and version "2.2.1.8"		-		Affected
Ibm Search vendor "Ibm"		Vios Search vendor "Ibm" for product "Vios"				2.2.1.9 Search vendor "Ibm" for product "Vios" and version "2.2.1.9"		-		Affected
Ibm Search vendor "Ibm"		Vios Search vendor "Ibm" for product "Vios"				2.2.2.0 Search vendor "Ibm" for product "Vios" and version "2.2.2.0"		-		Affected
Ibm Search vendor "Ibm"		Vios Search vendor "Ibm" for product "Vios"				2.2.2.4 Search vendor "Ibm" for product "Vios" and version "2.2.2.4"		-		Affected
Ibm Search vendor "Ibm"		Vios Search vendor "Ibm" for product "Vios"				2.2.2.5 Search vendor "Ibm" for product "Vios" and version "2.2.2.5"		-		Affected
Ibm Search vendor "Ibm"		Vios Search vendor "Ibm" for product "Vios"				2.2.3.0 Search vendor "Ibm" for product "Vios" and version "2.2.3.0"		-		Affected
Ibm Search vendor "Ibm"		Vios Search vendor "Ibm" for product "Vios"				2.2.3.2 Search vendor "Ibm" for product "Vios" and version "2.2.3.2"		-		Affected
Ibm Search vendor "Ibm"		Vios Search vendor "Ibm" for product "Vios"				2.2.3.3 Search vendor "Ibm" for product "Vios" and version "2.2.3.3"		-		Affected
Ibm Search vendor "Ibm"		Aix Search vendor "Ibm" for product "Aix"				6.1 Search vendor "Ibm" for product "Aix" and version "6.1"		-		Affected
Ibm Search vendor "Ibm"		Aix Search vendor "Ibm" for product "Aix"				7.1 Search vendor "Ibm" for product "Aix" and version "7.1"		-		Affected