IBM Access Connections Shared Section Insecure Permissions Vulnerability
BID:14387
Info
IBM Access Connections Shared Section Insecure Permissions Vulnerability
| Bugtraq ID: | 14387 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 26 2005 12:00AM |
| Updated: | Jul 26 2005 12:00AM |
| Credit: | [email protected] disclosed this vulnerability. |
| Vulnerable: |
IBM Access Connections 3.71 IBM Access Connections 3.70 IBM Access Connections 3.53 IBM Access Connections 3.30 IBM Access Connections 3.20 IBM Access Connections 3.10 IBM Access Connections 3.0 IBM Access Connections 2.73 IBM Access Connections 2.72 IBM Access Connections 2.70 IBM Access Connections 2.63 IBM Access Connections 2.61 IBM Access Connections 2.60 IBM Access Connections 2.50 IBM Access Connections 2.25 IBM Access Connections 2.21 IBM Access Connections 2.20 IBM Access Connections 2.12 IBM Access Connections 2.11 IBM Access Connections 2.0 IBM Access Connections 1.10 IBM Access Connections 1.0 5 IBM Access Connections 1.0 1 IBM Access Connections 1.0 |
| Not Vulnerable: | |
Discussion
IBM Access Connections Shared Section Insecure Permissions Vulnerability
IBM Access Connections utilizes Shared Sections in an insecure manner. It creates a Shared Section memory region with insecure permissions allowing local attackers to gain inappropriate access to it.
Attackers may read the data stored in the memory region, gaining access to potentially sensitive information. They may also write arbitrary data to the shared memory segment, potentially crashing the processes using the segment and denying service to legitimate users.
IBM Access Connections utilizes Shared Sections in an insecure manner. It creates a Shared Section memory region with insecure permissions allowing local attackers to gain inappropriate access to it.
Attackers may read the data stored in the memory region, gaining access to potentially sensitive information. They may also write arbitrary data to the shared memory segment, potentially crashing the processes using the segment and denying service to legitimate users.
Exploit / POC
IBM Access Connections Shared Section Insecure Permissions Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
IBM Access Connections Shared Section Insecure Permissions Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
IBM Access Connections Shared Section Insecure Permissions Vulnerability
References:
References: