CVEs-PoC/2014/CVE-2014-3977.md

CVE-2014-3977

Description

libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on a temporary file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2179.

POC

Reference

• http://packetstormsecurity.com/files/127067/IBM-AIX-6.1.8-Privilege-Escalation.html
• http://packetstormsecurity.com/files/127067/IBM-AIX-6.1.8-Privilege-Escalation.html

Github

No PoCs found on GitHub currently.