lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCMD_LQUERYLV environment-variable value.

The remote host is missing AIX PTF U867549, which is related to the security of the package bos.rte.lvm.

The running of lquerylv command with variable DBGCMD_LQUERYLV set may allow a local user to gain root privileges.

The remote host is missing AIX PTF U868378, which is related to the security of the package bos.rte.lvm.

The running of lquerylv command with variable DBGCMD_LQUERYLV set may allow a local user to gain root privileges.

The remote host is missing AIX PTF U865862, which is related to the security of the package bos.rte.lvm.

The running of lquerylv command with variable DBGCMD_LQUERYLV set may allow a local user to gain root privileges.

The remote host is missing AIX PTF U865854, which is related to the security of the package bos.rte.lvm.

The running of lquerylv command with variable DBGCMD_LQUERYLV set may allow a local user to gain root privileges.

The running of lquerylv command with variable DBGCMD_LQUERYLV set may allow a local user to gain root privileges.

ID	Name	Product	Family	Severity
86194	AIX 7.1 TL 2 : bos.rte.lvm (U867549)	Nessus	AIX Local Security Checks	high
86126	AIX 6.1 TL 8 : bos.rte.lvm (U868378)	Nessus	AIX Local Security Checks	high
83879	AIX 6.1 TL 9 : bos.rte.lvm (U865862)	Nessus	AIX Local Security Checks	high
83878	AIX 7.1 TL 3 : bos.rte.lvm (U865854)	Nessus	AIX Local Security Checks	high
81108	AIX 6.1 TL 9 : lvm (IV67907)	Nessus	AIX Local Security Checks	high
80502	AIX 7.1 TL 2 : lvm (IV68478)	Nessus	AIX Local Security Checks	high
80500	AIX 6.1 TL 8 : lvm (IV68082)	Nessus	AIX Local Security Checks	high
80499	AIX 5.3 TL 12 : lvm (IV68070)	Nessus	AIX Local Security Checks	high
80498	AIX 7.1 TL 3 : lvm (IV67908)	Nessus	AIX Local Security Checks	high

Detections

Analytics

CVE-2014-8904

high

Tenable Plugins

high

high

high

high

high

high

high

high

high