The specific flaw exists within configuration of the portmap service. Weak access control allows all authenticated users to modify the binary for this service and thus execute code in the context of SYSTEM.
IBM has issued an update to correct this vulnerability. More details can be found at:
|Steven Seeley of Source Incite