AIX adb Vulnerability
BID:520
Info
AIX adb Vulnerability
| Bugtraq ID: | 520 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 12 1999 12:00AM |
| Updated: | Jul 12 1999 12:00AM |
| Credit: | First posted to BugTraq by GZ Apple <[email protected]> on July 12, 1999. |
| Vulnerable: |
IBM AIX 4.3.1 IBM AIX 4.3 IBM AIX 4.2.1 IBM AIX 4.2 IBM AIX 3.2.5 |
| Not Vulnerable: |
IBM AIX 4.3.2 |
Discussion
AIX adb Vulnerability
adb is the debugger that ships with IBM's AIX operating system. It is possible for a local user to cause a local denial of service through exploiting the version of adb shipped with AIX 4.2 through 4.3.1. The consequence of adb being exploited is the machine being halted by a malicious local user.
adb is the debugger that ships with IBM's AIX operating system. It is possible for a local user to cause a local denial of service through exploiting the version of adb shipped with AIX 4.2 through 4.3.1. The consequence of adb being exploited is the machine being halted by a malicious local user.
Exploit / POC
AIX adb Vulnerability
gcc -g -o a.out hello-world.c
$ adb a.out -
adb
.main,5:s
a.out: running
gcc -g -o a.out hello-world.c
$ adb a.out -
adb
.main,5:s
a.out: running
Solution / Fix
AIX adb Vulnerability
Solution:
Older versions of AIX may not have patches available for them as they are out of service.
In that case it is advised that adb is disabled.
AIX version 4.3.2 is not vulnerable to this attack.
A temporary fix is available via anonymous ftp from:
ftp://aix.software.ibm.com/aix/efixes/security/adb_hang.tar.Z
Filename sum md5
======================================================================
unix_mp.42.adb_hang_fix 00772 2693 960214a1945f2c70311283adc0b231a3
unix_mp.43.adb_hang_fix 15044 3302 584d1c5ea0223110e2d8eba84388f526
Solution:
Older versions of AIX may not have patches available for them as they are out of service.
In that case it is advised that adb is disabled.
AIX version 4.3.2 is not vulnerable to this attack.
A temporary fix is available via anonymous ftp from:
ftp://aix.software.ibm.com/aix/efixes/security/adb_hang.tar.Z
Filename sum md5
======================================================================
unix_mp.42.adb_hang_fix 00772 2693 960214a1945f2c70311283adc0b231a3
unix_mp.43.adb_hang_fix 15044 3302 584d1c5ea0223110e2d8eba84388f526