IBM AIX PAGINIT Local Buffer Overflow Vulnerability
BID:12043
Info
IBM AIX PAGINIT Local Buffer Overflow Vulnerability
| Bugtraq ID: | 12043 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 20 2004 12:00AM |
| Updated: | Dec 20 2004 12:00AM |
| Credit: | Discovery is credited to cees-bart <[email protected]>. |
| Vulnerable: |
IBM AIX 5.3 L IBM AIX 5.2.2 IBM AIX 5.2 L IBM AIX 5.3 IBM AIX 5.2 |
| Not Vulnerable: | |
Discussion
IBM AIX PAGINIT Local Buffer Overflow Vulnerability
paginit is reported prone to a local buffer overflow vulnerability. This issue presents itself because the application fails to carry out boundary checks on user-supplied data from the command line. It is reported that this issue may allow a local attacker to gain elevated privileges on a vulnerable computer.
An attacker can exploit this to gain elevated privileges by supplying replacement memory addresses and shellcode through the affected argument.
paginit is reported prone to a local buffer overflow vulnerability. This issue presents itself because the application fails to carry out boundary checks on user-supplied data from the command line. It is reported that this issue may allow a local attacker to gain elevated privileges on a vulnerable computer.
An attacker can exploit this to gain elevated privileges by supplying replacement memory addresses and shellcode through the affected argument.
Exploit / POC
IBM AIX PAGINIT Local Buffer Overflow Vulnerability
The following exploit is available:
The following exploit is available:
Solution / Fix
IBM AIX PAGINIT Local Buffer Overflow Vulnerability
Solution:
IBM has released fixes and an advisory to address this issue:
IBM AIX 5.2
IBM AIX 5.3
IBM AIX 5.2 L
IBM AIX 5.2.2
IBM AIX 5.3 L
Solution:
IBM has released fixes and an advisory to address this issue:
IBM AIX 5.2
IBM AIX 5.3
IBM AIX 5.2 L
IBM AIX 5.2.2
IBM AIX 5.3 L
References
IBM AIX PAGINIT Local Buffer Overflow Vulnerability
References:
References:
- AIX Homepage (IBM)
- AIX 5.1/5.2/5.3 local root exploits (cees-bart