AIX writesrv Buffer Overflow Vulnerability

Bugtraq ID:	399
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Oct 28 1997 12:00AM
Updated:	Oct 28 1997 12:00AM
Credit:	This vulnerability was published by the IBM ERS Response Team as ERS-SVA-E01-1997:005.1 on 28 October 1997.
Vulnerable:	IBM AIX 4.2.1 IBM AIX 4.2 IBM AIX 4.1.5 IBM AIX 4.1.4 IBM AIX 4.1.3 IBM AIX 4.1.2 IBM AIX 4.1.1 IBM AIX 4.1
Not Vulnerable:	IBM AIX 4.3.2 IBM AIX 4.3

AIX writesrv Buffer Overflow Vulnerability

The writesrv daemon under AIX does not properly verify it's input and is subject to a buffer overflow attack. Because writesrv is SUID root, this attack will lead to root priveleges.

AIX writesrv Buffer Overflow Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

AIX writesrv Buffer Overflow Vulnerability

Solution:
SECURITY: buffer overflow in writesrv

AIX 4.1
---------

APAR # IX69168

AIX 4.2
----------

APAR # IX69169

AIX writesrv Buffer Overflow Vulnerability

References:

• AIX Fix Distribution Service (IBM)
  
• IBM Support Databases (IBM)