|
|
Info |
Last Modified |
| about 1 year ago |
|
|
|
|
|
Description |
IBM AIX contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when an attacker attempts to login to an account which has remote login disabled. If the userid and password combination is correct the operating system will respond with a text saying that remote logins are disabled. The attacker can thus brute-force or verify a password resulting in a loss of confidentiality.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Information Disclosure
Impact:
Loss of Confidentiality
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
|
|
Solution |
Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround(s): implement better password policies making it harder to guess password or refrain from disabling remote login
|
|
Products |
|
AIX
 |
4.3.3 |
5.1 |
5.2 |
|
|
|
|
Credit |
- Scott Jefferd - scott.jefferd
 cantire.com -
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
