IBM AIX 'syscall' Unspecified Buffer Overflow Vulnerability

Bugtraq ID:	35615
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Jul 07 2009 12:00AM
Updated:	Jul 09 2009 04:46PM
Credit:	IBM
Vulnerable:	IBM AIX 5.3
Not Vulnerable:

IBM AIX 'syscall' Unspecified Buffer Overflow Vulnerability

The IBM AIX 'syscall' functionality is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Further details have not been disclosed. We will update this BID as more information emerges.

A local attacker can exploit this issue to execute arbitrary code as an affected process, possibly with kernel-level privileges. Failed exploit attempts will likely cause denial-of-service conditions.

This issue affects AIX 5.3.

IBM AIX 'syscall' Unspecified Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM AIX 'syscall' Unspecified Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for details.

IBM AIX 'syscall' Unspecified Buffer Overflow Vulnerability

References:

• AIX Homepage (IBM)
  
• IZ54713: SYSCALL BUFFER OVERFLOW VULNERABILITY (IBM)
  
• IZ54714: SYSCALL BUFFER OVERFLOW VULNERABILITY (IBM)