Privilege escalation via writable login executable

Local privilege escalation in SolarWinds Advanced Monitoring Agent before 10.8.9 allows local users to execute commands as another user. A login-triggered executable is writable by every system user, allowing its replacement with a Trojan horse that runs in the context of the next user who logs in. An attacker needs local low-privileged access, and execution waits for another local or remote login whose privileges bound the resulting command execution.