IBM AIX UMOUNTALL Unspecified Absolute Path Security Vulnerability

Bugtraq ID:	15758
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Dec 07 2005 12:00AM
Updated:	Dec 07 2005 12:00AM
Credit:	This vulnerability was disclosed by the vendor.
Vulnerable:	IBM AIX 5.3 IBM AIX 5.2 IBM AIX 5.1
Not Vulnerable:

IBM AIX UMOUNTALL Unspecified Absolute Path Security Vulnerability

IBM AIX umountall is prone to an unspecified absolute path security vulnerability.

This issue is due to an unspecified security error with regards to absolute paths.

Very little information is available on this vulnerability. This BID will be updated as further information becomes available.

IBM AIX UMOUNTALL Unspecified Absolute Path Security Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

IBM AIX UMOUNTALL Unspecified Absolute Path Security Vulnerability

Solution:
IBM has released APARs IY79485, IY75283, and IY75294 to address this issue in AIX. Please see the referenced advisories for more information.


IBM AIX 5.1

• IBM IY79485
  http://www-1.ibm.com/support/docview.wss?uid=isg1IY79485

IBM AIX 5.2

• IBM IY75283
  http://www-1.ibm.com/support/docview.wss?uid=isg1IY75283

IBM AIX 5.3

• IBM IY75294
  http://www-1.ibm.com/support/docview.wss?uid=isg1IY75294

IBM AIX UMOUNTALL Unspecified Absolute Path Security Vulnerability

References:

• IY75283: SECURITY : VULNERABILITIES IN UMOUNTALL COMMAND. (IBM)
  
• IY75294: SECURITY : VULNERABILITIES IN UMOUNTALL COMMAND. (IBM)
  
• IY79485: SECURITY : VULNERABILITIES IN UMOUNTALL COMMAND. (IBM)