IBM AIX 'pioout' Local Buffer Overflow Vulnerability

Bugtraq ID:	27428
Class:	Boundary Condition Error
CVE:	CVE-2007-5764
Remote:	No
Local:	Yes
Published:	Jan 22 2008 12:00AM
Updated:	Jun 22 2009 08:59PM
Credit:	The vendor credits iDefense Labs with the discovery of this issue.
Vulnerable:	IBM AIX 6.1 IBM AIX 5.3 IBM AIX 5.2
Not Vulnerable:

IBM AIX 'pioout' Local Buffer Overflow Vulnerability

IBM AIX is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

Attackers can exploit this issue to execute arbitrary code with superuser privileges. Successful exploits will completely compromise affected computers. Failed exploit attempts will result in a denial of service.

IBM AIX 'pioout' Local Buffer Overflow Vulnerability

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

IBM AIX 'pioout' Local Buffer Overflow Vulnerability

Solution:
The vendor has released an advisory and fixes. Please see the references for more information.

IBM AIX 'pioout' Local Buffer Overflow Vulnerability

References:

• AIX Homepage (IBM)
  
• IBM AIX pioout BSS Buffer Overflow Vulnerability (iDefense)
  
• iDefense Security Advisory 01.23.08: IBM AIX pioout BSS Buffer Overflow Vulnerab (iDefense Labs )
  
• AIX pioout buffer overflow (IBM)