Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can use IBM SPSS Modeler, in order to escalate his
privileges.

Impacted products: SPSS Modeler

Severity: 2/4

Creation date: 10/06/2014

DESCRIPTION OF THE VULNERABILITY

The IBM SPSS Modeler product can be installed on Unix platforms.

However, started processes do not loose privileges of the root
group.

An attacker can therefore use IBM SPSS Modeler, in order to
escalate his privileges.

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/IBM-SPSS-Modeler-privilege-escalation-via-Root-GID-14858