AIX rcp Buffer Overflow Vulnerability
BID:400
Info
AIX rcp Buffer Overflow Vulnerability
| Bugtraq ID: | 400 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 28 1997 12:00AM |
| Updated: | Oct 28 1997 12:00AM |
| Credit: | This vulnerability was originally published by the IBM ERS Team as ERS-SVA-E01-1997:005.1 on 28 October 1997. |
| Vulnerable: |
IBM AIX 4.2 IBM AIX 4.1.5 IBM AIX 4.1.4 IBM AIX 4.1.3 IBM AIX 4.1.1 IBM AIX 4.1 |
| Not Vulnerable: |
IBM AIX 4.3.2 IBM AIX 4.3 IBM AIX 4.2.1 |
Discussion
AIX rcp Buffer Overflow Vulnerability
There is a buffer overflow in /bin/rcp under certain versions of AIX. This overflow can be triggered by user supplied data and will result in a root compromise.
There is a buffer overflow in /bin/rcp under certain versions of AIX. This overflow can be triggered by user supplied data and will result in a root compromise.
Exploit / POC
AIX rcp Buffer Overflow Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution / Fix
AIX rcp Buffer Overflow Vulnerability
Solution:
IBM has made the following APAR's available to address this problem:
AIX 4.1
---------
APAR # IX69170
AIX 4.2
---------
APAR # IX69171
Solution:
IBM has made the following APAR's available to address this problem:
AIX 4.1
---------
APAR # IX69170
AIX 4.2
---------
APAR # IX69171
References
AIX rcp Buffer Overflow Vulnerability
References:
References:
- AIX Fix Distribution Service (IBM)
- IBM Support Databases (IBM)