AIX lquerypv Vulnerability
BID:455
Info
AIX lquerypv Vulnerability
| Bugtraq ID: | 455 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 24 1996 12:00AM |
| Updated: | Nov 24 1996 12:00AM |
| Credit: | This vulnerability was posted to the Bugtraq mailing list by Aleph1 <[email protected]> on Sun, 24 Nov 1996. |
| Vulnerable: |
IBM AIX 4.2.1 IBM AIX 4.2 IBM AIX 4.1.5 IBM AIX 4.1.4 IBM AIX 4.1.3 IBM AIX 4.1.2 IBM AIX 4.1.1 IBM AIX 4.1 |
| Not Vulnerable: |
IBM AIX 4.3.2 IBM AIX 4.3 |
Discussion
AIX lquerypv Vulnerability
There exists a vulnerability in the lquerypv command under AIX. By using the '-h' flaq, a user may read any file on the file system in hex format.
There exists a vulnerability in the lquerypv command under AIX. By using the '-h' flaq, a user may read any file on the file system in hex format.
Exploit / POC
AIX lquerypv Vulnerability
/usr/sbin/lquerypv -h /pathtofilename
/usr/sbin/lquerypv -h /pathtofilename
Solution / Fix
AIX lquerypv Vulnerability
Solution:
IBM has released the following APAR'S to address this problem:
AIX 4.2
----------
APAR # IX64204
AIX 4.1
---------
APAR # IX64203
Solution:
IBM has released the following APAR'S to address this problem:
AIX 4.2
----------
APAR # IX64204
AIX 4.1
---------
APAR # IX64203
References
AIX lquerypv Vulnerability
References:
References:
- AIX Fix Distribution Service (IBM)
- IBM Support Databases (IBM)