Privilege Escalation in IBM AIX InfiniBand Subsystem (arp.ib, ibstat)

This repository contains a single Metasploit module (modules/exploits/aix/local/ibstat_path.rb) that exploits a local privilege escalation vulnerability (CVE-2013-4011) in the SUID 'ibstat' binary on IBM AIX 6.1 and 7.1. The exploit abuses the $PATH environment variable to execute a malicious 'arp' script, which in turn sets the setuid bit on a custom shell binary, granting root privileges. The module checks for the presence of the vulnerable SUID binary, writes and compiles a C program (or copies /bin/sh if gcc is unavailable), drops a malicious shell script, manipulates the $PATH, and triggers the vulnerability by running 'ibstat'. If successful, it restores the $PATH and executes the payload as root. The exploit is operational, provides root access, and is designed for use within the Metasploit framework. The only endpoints referenced are local file paths relevant to the exploit process.