IBM AIX GetShell and GetCommand Arbitrary File Overwrite Vulnerability

Bugtraq ID:	15880
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Dec 15 2005 12:00AM
Updated:	Dec 15 2005 12:00AM
Credit:	Reported by the vendor.
Vulnerable:	IBM AIX 5.3 L IBM AIX 5.3
Not Vulnerable:

IBM AIX GetShell and GetCommand Arbitrary File Overwrite Vulnerability

IBM AIX is prone to an arbitrary file overwrite vulnerability.

This vulnerability affects the getShell and getCommand utilities.

This may result in various attacks such as data corruption and privilege escalation.

AIX 5.3 is vulnerable to this issue.

IBM AIX GetShell and GetCommand Arbitrary File Overwrite Vulnerability

An exploit is likely not required.

IBM AIX GetShell and GetCommand Arbitrary File Overwrite Vulnerability

Solution:
IBM has released interim fixes for AIX 5.3. APAR IY79092 will be released on January 30, 2006. Please see references for more information.


IBM AIX 5.3

• IBM getshell_ifix.tar.Z
  ftp://aix.software.ibm.com/aix/efixes/security/getshell_ifix.tar.Z

IBM AIX 5.3 L

• IBM getshell_ifix.tar.Z
  ftp://aix.software.ibm.com/aix/efixes/security/getshell_ifix.tar.Z

IBM AIX GetShell and GetCommand Arbitrary File Overwrite Vulnerability

References:

• AIX Homepage (IBM)
  
• Patches available for IBM AIX flaws ("NGSSoftware Insight Security Research" )