18727 : IBM AIX Negative UID Privilege Escalation
Printer | http://osvdb.org/18727 | Email This | Edit Vulnerability

Views This Week	Views All Time	Added to OSVDB	Last Modified	Modified (since 2008)	Percent Complete
7	933	almost 8 years ago	about 5 years ago	0 times	90%

Timeline

Disclosure Date
1994-10-22

Description

Older AIX releases, and potentially other Unix flavors may contain a flaw related to user ID (UID) processing that allows for privilege escalation. In some cases, various daemons or services fail to properly check the bounds of UIDs resulting in an overflow. With a specially crafted UID, an attacker can assume root privileges regardless of the root UID mapping. For NFS servers, this may be abused to 'wrap' your UID around past 65535, so that the effective UID processed becomes '0' or 'root', resulting in full access to the exported file system.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public

Solution

Upgrade to a current version of the OS, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the following workaround(s): do not use UIDs larger than 65535.

Products

IBM Corporation

AIX

3.2.x

References

Mail List Post: http://archives.neohapsis.com/archives/bugtraq/1994_4/0312.html
http://archives.neohapsis.com/archives/bugtraq/1994_4/0317.html
Generic Informational URL: http://lists.debian.org/lsb-spec/2000/12/msg00050.html

Credit

Unknown or Incomplete

CVSSv2 Score

NVD does not currently have a CVSSv2 score assigned.

Comments

Add Comment Hide Add Comment

No Comments.

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.