AIX bsh Vulnerability
BID:349
Info
AIX bsh Vulnerability
| Bugtraq ID: | 349 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jun 02 1994 12:00AM |
| Updated: | Jun 02 1994 12:00AM |
| Credit: | This bug was initially released by IBM support on June 2, 1994. It was then forwarded to the Bugtraq mailing list by Adam Shostack <[email protected]> on Thu, 2 June 94. |
| Vulnerable: |
IBM AIX 3.2 IBM AIX 3.1 IBM AIX 2.2.1 IBM AIX 1.3 IBM AIX 1.2.1 |
| Not Vulnerable: |
IBM AIX 4.3 IBM AIX 4.2.1 IBM AIX 4.2 IBM AIX 4.1.5 IBM AIX 4.1.4 IBM AIX 4.1.3 IBM AIX 4.1.2 IBM AIX 4.1.1 IBM AIX 4.1 IBM AIX 3.2.5 IBM AIX 3.2.4 |
Discussion
AIX bsh Vulnerability
There is a vulnerability in bshbatch queue under AIX 3.2 and previous which will allow for allow unathorized access. The bug may be exploited by local users and by remote users if network printing is enabled. The lies in that the bsh queue will permit users on remote or local systems to execute commands at an elevated privilege (root).
There is a vulnerability in bshbatch queue under AIX 3.2 and previous which will allow for allow unathorized access. The bug may be exploited by local users and by remote users if network printing is enabled. The lies in that the bsh queue will permit users on remote or local systems to execute commands at an elevated privilege (root).
Exploit / POC
AIX bsh Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution / Fix
AIX bsh Vulnerability
Solution:
IBM has issued the following APAR for AIX versions 3.2 and previous to address this problem:
APAR #IX44381
Upgrading to a more recent version of AIX is advised, over installing this APAR to address the problem. AIX 3.2 is not the current commercial version, and in fact is several revisions behind current shipping versions.
Solution:
IBM has issued the following APAR for AIX versions 3.2 and previous to address this problem:
APAR #IX44381
Upgrading to a more recent version of AIX is advised, over installing this APAR to address the problem. AIX 3.2 is not the current commercial version, and in fact is several revisions behind current shipping versions.