A vulnerability has been reported in IBM AIX, which can be exploited by malicious, local users to gain escalated privileges.

The vulnerability is caused due to an error in the "swcons" command, which can be exploited to create files that are owned by root and have insecure permissions.

Successful exploitation allows execution of arbitrary code with root privileges, but requires that an attacker is member of the "system" group.

This is related to vulnerability #7 in:
SA27437

The vulnerability is reported in AIX 5.2, 5.3, and 6.1.

Solution
Apply fixes or APARs as soon as they become available.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://aix.software.ibm.com/aix/efixes/security/swcons_advisory.asc

http://www.ibm.com/support/docview.wss?uid=isg1IZ18335
http://www.ibm.com/support/docview.wss?uid=isg1IZ18339
http://www.ibm.com/support/docview.wss?uid=isg1IZ18338
http://www.ibm.com/support/docview.wss?uid=isg1IZ18334
http://www.ibm.com/support/docview.wss?uid=isg1IZ18341
http://www.ibm.com/support/docview.wss?uid=isg1IZ28943

Deep Links
Links available to Secunia VIM customers