IBM AIX Kernel Security Advisory 2008.03.26 Multiple Vulnerabilities

Bugtraq ID:	28467
Class:	Unknown
CVE:	CVE-2008-1595 CVE-2008-1596 CVE-2008-1598 CVE-2008-1593
Remote:	No
Local:	Yes
Published:	Mar 26 2008 12:00AM
Updated:	Jul 06 2016 02:17PM
Credit:	The vendor disclosed these issues.
Vulnerable:	IBM AIX 6.1 IBM AIX 5.3 IBM AIX 5.2
Not Vulnerable:

IBM AIX Kernel Security Advisory 2008.03.26 Multiple Vulnerabilities

IBM AIX is prone to six vulnerabilities that affect the kernel.

Attackers can leverage these issues to execute arbitrary code with superuser privileges, to obtain potentially sensitive information, or to cause denial-of-service conditions.

IBM AIX Kernel Security Advisory 2008.03.26 Multiple Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM AIX Kernel Security Advisory 2008.03.26 Multiple Vulnerabilities

Solution:
The vendor released an advisory and fixes. Please see the references for more information.


IBM AIX 6.1

• IBM kernel_fix.tar
  ftp://aix.software.ibm.com/aix/efixes/security/kernel_fix.tar

IBM AIX 5.2

• IBM kernel_fix.tar
  ftp://aix.software.ibm.com/aix/efixes/security/kernel_fix.tar

IBM AIX 5.3

• IBM kernel_fix.tar
  ftp://aix.software.ibm.com/aix/efixes/security/kernel_fix.tar

IBM AIX Kernel Security Advisory 2008.03.26 Multiple Vulnerabilities

References:

• AIX Fixes (IBM)
  
• AIX Homepage (IBM)