IBM Netezza Performance Server Replication Services versions 3.0.2.0 through 3.0.5.0 contain a CWE-250 vulnerability that permits an attacker with low privileges to escalate to root privileges. Exploitation allows execution of commands as root, root shell access, password changes for the root user, and the ability to alter or remove critical system files and install persistent backdoors. The vulnerability results in total system compromise. The CVSS 3.1 base score is 7.8, reflecting high impact with local attack vector, low attack complexity, low privileges required, no user interaction, and full confidentiality, integrity, and availability impact. No official patch or remediation information is currently available, and no known exploits are reported in the wild.

Successful exploitation leads to full system compromise, including root-level command execution, root shell access, unauthorized root password changes, modification or deletion of system-wide files, and installation of persistent backdoors. This results in complete loss of confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict low-privileged access to the affected IBM Netezza Performance Server Replication Services and monitor for suspicious activity related to privilege escalation attempts.