IBM AIX Invscout Local Buffer Overflow Vulnerability

Bugtraq ID:	13909
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Jun 09 2005 12:00AM
Updated:	Jun 09 2005 12:00AM
Credit:	Discovery is credited to Computer Academic Underground.
Vulnerable:	IBM AIX 5.3 IBM AIX 5.2 IBM AIX 5.1
Not Vulnerable:

IBM AIX Invscout Local Buffer Overflow Vulnerability

invscout is prone to a local buffer overflow vulnerability. This issue presents itself because the application fails to carry out boundary checks on user-supplied data from the command line.

IBM AIX Invscout Local Buffer Overflow Vulnerability

The following proof of concept is available:
/usr/sbin/invscout `perl -e 'print "A" x 1024;'`

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

IBM AIX Invscout Local Buffer Overflow Vulnerability

Solution:
IBM has updated their advisory; APARs are now available to address this issue:


IBM AIX 5.1

• IBM IY72752
  http://www-1.ibm.com/servers/eserver/support/pseries/aixfixes.html

IBM AIX 5.2

• IBM IY75421
  http://www-1.ibm.com/servers/eserver/support/pseries/aixfixes.html

IBM AIX 5.3

• IBM IY75421
  http://www-1.ibm.com/servers/eserver/support/pseries/aixfixes.html

IBM AIX Invscout Local Buffer Overflow Vulnerability

References:

• AIX Homepage (IBM)
  
• IBM AIX invscout Commandline Argument Overflow (Computer Academic Underground)