IBM OS/400 'BrSmRcvAndCheck()' Buffer Overflow Vulnerability

Bugtraq ID:	29660
Class:	Boundary Condition Error
CVE:	CVE-2008-2709
Remote:	Yes
Local:	No
Published:	Jun 11 2008 12:00AM
Updated:	Apr 16 2015 05:59PM
Credit:	The vendor disclosed this vulnerability.
Vulnerable:	IBM OS/400 V6R1M0 IBM OS/400 V5R4M5 IBM OS/400 V5R4M0
Not Vulnerable:

IBM OS/400 'BrSmRcvAndCheck()' Buffer Overflow Vulnerability

IBM OS/400 is prone to a remote buffer-overflow vulnerability because it fails to properly perform size checks on user-supplied input.

An attacker can exploit this issue to halt the IPL (Initial Program Load) bootstrap process, denying service to legitimate users. Given the nature of this issue, code execution may also be possible, but that has not been confirmed.

IBM OS/400 'BrSmRcvAndCheck()' Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM OS/400 'BrSmRcvAndCheck()' Buffer Overflow Vulnerability

Solution:
The vendor has issued an advisory and fixes. Please contact the vendor for details on obtaining and applying the appropriate updates. See the references for more information.

IBM OS/400 'BrSmRcvAndCheck()' Buffer Overflow Vulnerability

References:

• IBM Homepage (IBM)
  
• MA36741 - IPL-SRCB6000302-UNPRED IOPNIOA00020010 TASK HALT DURING IPL WITH SRCB6 (IBM)