Vulnerability Bulletins

IBM Security Bulletin: Proof of Concept exploit code, which uses a flaw in glibc that can allow a local unprivileged user to gain root on Linux machine in IBM QRadar Incident Forensics (CVE-2014-5119)

Affected software	IBM

A vulnerability in the GNU C library (glibc) can allow a local unprivileged user to gain root on some Linux machines. To exploit this flaw, an attacker needs to be able to run unprivileged arbitrary code on the local system. CVE(s): CVE-2014-5119 Affected product(s) and affected version(s): IBM QRadar Incident Forensics 7.2.3 and below Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_proof_of_concept_exploit_code_which_uses_a_flaw_in_glibc_that_can_allow_a_local_unprivileged_user_to_gain_root_on_linux_machine_in_ibm_qradar_incident_forensics_cve_2014_5119

IBM Security Bulletin: Proof of Concept exploit code, which uses a flaw in glibc that can allow a local unprivileged user to gain root on Linux machine in IBM QRadar Incident Forensics (CVE-2014-5119)