CVE-2015-7442 consoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging Utility before 1.7.4.4 and 1.8.x before 1.8.4 allows local users to gain privileges via a Trojan horse pr...
HighCVSS 7.0
EPSS 0.42%
- Published
- Updated
- Exploit status
- No public exploit known
Description
consoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging Utility before 1.7.4.4 and 1.8.x before 1.8.4 allows local users to gain privileges via a Trojan horse program that is located in /tmp with a name based on a predicted PID value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm installation manager | = 1.7.4.3 | No fix listed |
| ibm installation manager | = 1.8.0.0 | No fix listed |
| ibm installation manager | = 1.8.1.0 | No fix listed |
| ibm installation manager | = 1.8.2.0 | No fix listed |
| ibm installation manager | = 1.8.2.1 | No fix listed |
| ibm installation manager | = 1.8.3.0 | No fix listed |
| ibm packaging utility | <= 1.7.4.3 | No fix listed |
| ibm packaging utility | = 1.8.0.0 | No fix listed |
| ibm packaging utility | = 1.8.1.0 | No fix listed |
| ibm packaging utility | = 1.8.2.0 | No fix listed |
| ibm packaging utility | = 1.8.2.1 | No fix listed |
| ibm packaging utility | = 1.8.3.0 | No fix listed |
References
- www-01.ibm.com vendor-advisory
- 77558 vdb-entry