AIX lquerylv Buffer Overflow Vulnerability

Bugtraq ID:	451
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	May 26 1997 12:00AM
Updated:	May 26 1997 12:00AM
Credit:	This bug was posted to the Bughtraq mail list by Georgi Guninski on Mon, 26 May 1997.
Vulnerable:	IBM AIX 4.2 IBM AIX 4.1.5 IBM AIX 4.1.4 IBM AIX 4.1.3 IBM AIX 4.1.2 IBM AIX 4.1.1 IBM AIX 4.1 IBM AIX 3.2.5 IBM AIX 3.2.4 IBM AIX 3.2
Not Vulnerable:	IBM AIX 4.3.2 IBM AIX 4.3 IBM AIX 4.2.1

AIX lquerylv Buffer Overflow Vulnerability

Under certain versions of AIC there is a buffer overflow in /usr/sbin/lquerylv. Because the program is SUID root this will result in a root compromise.

AIX lquerylv Buffer Overflow Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

AIX lquerylv Buffer Overflow Vulnerability

Solution:
IBM has released the following APAR'S to address this problem:

AIX 4.2
----------
APAR # IX67998

AIX 4.1
---------
APAR # IX67997

AIX 3.2
----------
APAR # IX67999

AIX lquerylv Buffer Overflow Vulnerability

References:

• AIX Fix Distribution Service (IBM)
  
• IBM Support Databases (IBM)