OSVDB ID: 7994

Title: IBM AIX Printer Capability Format String Local Privilege Escalation

Info

Disclosure
May 13, 2003

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 IBM AIX contains several printer related commands that may allow a malicious user to gain access to unauthorized privileges - printq or root privileges. The issue is triggered when running the commands with malformed input. This flaw may lead to a loss of confidentiality and/or integrity.

Classification

 Location: Local Access Required, Local / Remote, Context Dependent
Attack Type: Input Manipulation
Impact: Loss of Confidentiality, Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

 Upgrade AIX using the APAR numbers AIX 4.3: IY42089, 5.1.0: IY42090and AIX 5.2.0: IY42091 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

International Business Machines Corporation

AIX

 4.3
5.1
5.2

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/7994