IBM AIX contains a flaw related to the default configuration of sendmail. The issue is triggered when handling constructs in a $HOME/.forward file. This may allow a local attacker to gain escalated privileges via a .forward command in a home directory.
Classification
Location:
Local Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Patch / RCS
Exploit:
Exploit Unknown
Disclosure:
Vendor Verified
OSVDB:
Authentication Required
Solution
Currently, there are no known workarounds or upgrades to correct this issue. However, IBM has released a patch to address this vulnerability. Check the vendor advisory or solution in the references section.
