IBM AIX Perfstat Kernel Extension Local Denial of Service Vulnerability

Bugtraq ID:	25554
Class:	Unknown
CVE:	CVE-2007-4799
Remote:	No
Local:	Yes
Published:	Sep 05 2007 12:00AM
Updated:	May 07 2015 05:35PM
Credit:	The vendor reported this issue.
Vulnerable:	IBM AIX 5.3
Not Vulnerable:

IBM AIX Perfstat Kernel Extension Local Denial of Service Vulnerability

IBM AIX is prone to a denial-of-service vulnerability. This issue occurs in the 'perfstat' kernel extension.

An attacker can exploit this issue to crash the affected computer, denying service to legitimate users.

IBM AIX Perfstat Kernel Extension Local Denial of Service Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM AIX Perfstat Kernel Extension Local Denial of Service Vulnerability

Solution:
The vendor released updates and an advisory to address this issue. Please see the references for more information.


IBM AIX 5.3

• IBM perfstat_ifix.tar.Z
  ftp://aix.software.ibm.com/aix/efixes/security/perfstat_ifix.tar.Z

IBM AIX Perfstat Kernel Extension Local Denial of Service Vulnerability

References:

• IBM AIX Home Page (IBM)
  
• AIX Perfstat Kernel Extension Denial of Service Vulnerability (IBM)