A local overflow exists in AIX. The enq command fails to validate input parameter -M resulting in a buffer overflow. With a specially crafted request, an attacker can execute arbitrary commands via a long -M argument resulting in a loss of integrity.
Classification
Location:
Local Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Public
OSVDB:
Authentication Required
Solution
Upgrade AIX using the patch numbers AIX 4.2: APAR IY08287 and AIX 4.3: APAR IY08143 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
cc.hut.fi -
