IBM AIX GID in NFSv4 Remote Denial of Service Vulnerability

Bugtraq ID:	55546
Class:	Unknown
CVE:	CVE-2012-4817
Remote:	Yes
Local:	No
Published:	Sep 13 2012 12:00AM
Updated:	Sep 13 2012 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	IBM AIX 7.1.1 IBM AIX 7.1 6 IBM AIX 7.1 IBM AIX 6.1.7 5 IBM AIX 6.1.7 IBM AIX 6.1.6 8 IBM AIX 6.1.6 IBM AIX 6.1.5 IBM AIX 6.1.4 IBM AIX 6.1.3 IBM AIX 6.1.2 IBM AIX 6.1.1 IBM AIX 5.3.10 IBM AIX 5.3.9 IBM AIX 5.3.8 IBM AIX 5.3.7 IBM AIX 5.3 L IBM AIX 7.1.1.5 IBM AIX 7.1 IBM AIX 6.1 IBM AIX 5.3.12 IBM AIX 5.3.11 IBM AIX 5.3
Not Vulnerable:

IBM AIX GID in NFSv4 Remote Denial of Service Vulnerability

IBM AIX is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause the NFS service unusable resulting in a denial-of-service condition.

IBM AIX versions 5.3, 6.1, and 7.1 are affected.

IBM AIX GID in NFSv4 Remote Denial of Service Vulnerability

Currently we are not aware of any publicly available exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

IBM AIX GID in NFSv4 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

IBM AIX GID in NFSv4 Remote Denial of Service Vulnerability

References:

• IBM AIX Home Page (IBM)
  
• AIX NFSv4 vulnerability (IBM)