Info

Disclosure

Jun 06, 2005

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

A local overflow exists in AIX. The 'pdisable' command fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted request containing an overly long command line argument, a malicious user can cause arbitrary code execution resulting in a loss of integrity.

Classification

Location: Local Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Unknown

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

IBM Corporation

AIX

5.3

References

Security Tracker: 1014132
Secunia Advisory ID: 15636
Related OSVDB ID: 17256 17258 17259 17260 17261
CVE ID: 2005-2233 (see also: NVD)
ISS X-Force ID: 20936
Keyword: CAU-2005-0006
Other Advisory URL: http://www.caughq.org/advisories/CAU-2005-0006.txt
Vendor URL: http://www.ibm.com/us/

Credit

intropy - intropycaughq.org -

Direct URL: http://osvdb.org/17257