AIX ping Buffer Overflow Vulnerability

Bugtraq ID:	387
Class:	Boundary Condition Error
CVE:	CVE-1999-1208
Remote:	No
Local:	Yes
Published:	Jul 21 1997 12:00AM
Updated:	Jul 21 1997 12:00AM
Credit:	This vulnerability was posted to the Bugtraq mailing list by Bryan P. Self <[email protected]> Mon, 21 Jul 1997.
Vulnerable:	IBM AIX 4.2 IBM AIX 4.1.5 IBM AIX 4.1.4 IBM AIX 4.1.3 IBM AIX 4.1.2 IBM AIX 4.1.1 IBM AIX 4.1 IBM AIX 3.2.5 IBM AIX 3.2.4 IBM AIX 3.2
Not Vulnerable:	IBM AIX 4.3.2 IBM AIX 4.3 IBM AIX 4.2.1

AIX ping Buffer Overflow Vulnerability

A buffer overflow condition exists in some versions of /usr/sbin/ping under AIX. Given that ping is SUID root, this overflow allows malicious users to gain root from it.

AIX ping Buffer Overflow Vulnerability

x

• /data/vulnerabilities/exploits/aixping.c

AIX ping Buffer Overflow Vulnerability

Solution:
IBM has released the following APAR's to address this problem:

AIX 4.2
---------
APAR # IX62144

AIX 4.1
----------
APAR # IX61019

AIX 3.2
---------
APAR # IX60927

AIX ping Buffer Overflow Vulnerability

References:

• AIX Fix Distribution Service (IBM)
  
• IBM Support Databases (IBM)