OSVDB ID: 7995

Title: IBM AIX secldapclntd loadmod Remote Command Execution

Info

Disclosure
Feb 21, 2003

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 IBM AIX contains a flaw that may allow a malicious user to modify user accounts. The issue is triggered when a specially crafted LDAP request is sent to the secldapclntd daemon. It is possible that the flaw may allow modification of user accounts resulting in a loss of integrity.

Classification

 Location: Remote / Network Access
Attack Type: Authentication Management, Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

 Upgrade AIX using the APAR numbers AIX 4.3.3: IY40510, AIX 5.1.0:  IY40228 and AIX 5.2.0:  IY40517 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

International Business Machines Corporation

AIX

 4.3.3
5.1
5.2

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/7995