IBM AIX 7.2 inscout Privilege Escalation

This Metasploit module exploits a command injection vulnerability in IBM AIX invscout set-uid root utility present in AIX 7.2 and earlier. The undocumented -rpm argument can be used to install an RPM file; and the undocumented -o argument passes arguments to the rpm utility without validation, leading to command injection with effective-uid root privileges. This module has been tested successfully on AIX 7.2.

aix argument command command injection escalation exploits file ibm injection install metasploit privilege privilege escalation privileges root rpm utility validation vulnerability