A local overflow exists in IBM AIX library libIM. The library functions fails to validate input using the input methods "im" parameter resulting in a buffer overflow. With a specially crafted request to applications using this library, an attacker can cause execution of code resulting in a loss of integrity.
Classification
Location:
Local Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Public
Disclosure:
Vendor Verified
Solution
Upgrade AIX using the patch numbers AIX 4.3.3: APAR IY40307, AIX 5.1: APAR IY40317 and AIX 5.2: APAR IY40320 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
