OSVDB ID: 22130

Title: Multics on 6180 SLT-KS Dual SDW hphcs_ Privilege Escalation

Info

Disclosure

Unknown

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Multics contains a flaw that may allow a local user to gain elevated privileges. The issue occured when a user used the hphcs_ privileged gate to transfer the appropriate absolute segment number rather than using dynamic linking to gain access to any hphcs_ capability.

Classification

Location: Local Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public

Solution

Upgrade to version 23.6 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Multics

Multics on 6180

Unknown or Unspecified

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/22130