CVE-2009-2669 Privilege escalation in n/a

High 7.2 Published 5 Aug 2009 Updated 7 Aug 2024

Local attackers can exploit environment variable handling in IBM AIX runtime libraries to gain root privileges via setuid programs.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2009-2669?

CVE-2009-2669 is a high-severity vulnerability in Ibm Aix, published on 5 Aug 2009. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A certain debugging component in IBM AIX 5.3 and 6.1 does not properly handle the (1) _LIB_INIT_DBG and (2) _LIB_INIT_DBG_FILE environment variables, which allows local users to gain privileges by leveraging a setuid-root program to create an arbitrary root-owned file with world-writable permissions, related to libC.a (aka the XL C++ runtime library) in AIX 5.3 and libc.a in AIX 6.1.

Weakness: CWE-264

Which versions are affected by CVE-2009-2669?

It affects 1 product.

Products include Ibm Aix.

How do I fix CVE-2009-2669?

No fix has been published for CVE-2009-2669 yet. Limit exposure of the affected software until one is available.

Is CVE-2009-2669 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2009-2669 exists.

Public exploit code: 1 Exploit-DB entry.

All Ibm Aix vulnerabilities

Sources

Also known as GHSA-wfhq-rjjw-5xwh.