IBM AIX CHCONS Local Buffer Overflow Vulnerability

Bugtraq ID:	15247
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Oct 31 2005 12:00AM
Updated:	Oct 31 2005 12:00AM
Credit:	The vendor disclosed these issues.
Vulnerable:	IBM AIX 5.3 L IBM AIX 5.2.2 IBM AIX 5.2 L IBM AIX 5.1 L IBM AIX 5.3 IBM AIX 5.2 IBM AIX 5.1
Not Vulnerable:

IBM AIX CHCONS Local Buffer Overflow Vulnerability

IBM AIX chcons is prone to a local buffer overflow vulnerability. This issue arises because the application fails to perform boundary checks prior to copying user-supplied data into insufficiently-sized memory buffers. This issue presents itself when 'DEBUG MALLOC' is enabled.

If the affected utility has setuid-superuser privileges, then a successful attack allows arbitrary machine code execution with superuser privileges.

IBM AIX CHCONS Local Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

IBM AIX CHCONS Local Buffer Overflow Vulnerability

Solution:
IBM has released advisories to address this issue. Fixes are not currently available. Please see the referenced advisory for further information.

IBM AIX CHCONS Local Buffer Overflow Vulnerability

References:

• AIX Homepage (IBM)
  
• IY78241: SECURITY:BUFFER OVERFLOW VULNERABILITY IN 'CHCONS' COMMAND (IBM)
  
• IY78253: SECURITY:BUFFER OVERFLOW VULNERABILITY IN 'CHCONS' COMMAND (IBM)