IBM AIX Logical Volume Manager Multiple Commands Local Buffer Overflow Vulnerabilities

Bugtraq ID:	27431
Class:	Boundary Condition Error
CVE:	CVE-2008-0586
Remote:	No
Local:	Yes
Published:	Jan 22 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	The vendor discovered these issues.
Vulnerable:	IBM AIX 5.3 IBM AIX 5.2
Not Vulnerable:

IBM AIX Logical Volume Manager Multiple Commands Local Buffer Overflow Vulnerabilities

IBM AIX is prone to multiple local buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input.

Attackers can exploit these issues to execute arbitrary code with superuser privileges. Successful exploits will completely compromise affected computers. Failed exploit attempts will result in a denial of service.

NOTE: An attacker must be a member of the 'system' group to exploit these issues.

IBM AIX Logical Volume Manager Multiple Commands Local Buffer Overflow Vulnerabilities

Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM AIX Logical Volume Manager Multiple Commands Local Buffer Overflow Vulnerabilities

Solution:
The vendor released an advisory and fixes to address these issues. Please see the references for more information.

IBM AIX Logical Volume Manager Multiple Commands Local Buffer Overflow Vulnerabilities

References:

• AIX Homepage (IBM)
  
• AIX Logical Volume Manager buffer overflow (IBM)
  
• UPDATE AIX libc inet_network buffer overflow (IBM)