AIX Source Code Browser Buffer Overflow Vulnerability
BID:590
Info
AIX Source Code Browser Buffer Overflow Vulnerability
| Bugtraq ID: | 590 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Aug 18 1999 12:00AM |
| Updated: | Aug 18 1999 12:00AM |
| Credit: | This vulnerability was posted to the Bugtraq mailing list as an IBM-ERS advisory on Tue, 17 Aug 1999. |
| Vulnerable: |
IBM AIX 3.2.5 IBM AIX 3.2.4 IBM AIX 3.2 IBM AIX 3.1 IBM AIX 2.2.1 |
| Not Vulnerable: |
IBM AIX 4.3.2 IBM AIX 4.3.1 IBM AIX 4.3 IBM AIX 4.2.1 IBM AIX 4.2 IBM AIX 4.1.5 IBM AIX 4.1.4 IBM AIX 4.1.3 IBM AIX 4.1.2 IBM AIX 4.1.1 IBM AIX 4.1 |
Discussion
AIX Source Code Browser Buffer Overflow Vulnerability
A buffer overflow vulnerability has been discovered in the Source Code Browser's Program Database Name Server Daemon (pdnsd) of versions 2 and 3 of IBM's C Set ++ for AIX. This vulnerability allows local and remote users to gain root access.
A buffer overflow vulnerability has been discovered in the Source Code Browser's Program Database Name Server Daemon (pdnsd) of versions 2 and 3 of IBM's C Set ++ for AIX. This vulnerability allows local and remote users to gain root access.
Solution / Fix
AIX Source Code Browser Buffer Overflow Vulnerability
Solution:
IBM C Set ++ for AIX versions 2 and 3 are no longer supported and no APAR will be issued. Customers are encouraged to upgrade to a later compiler version.
Solution:
IBM C Set ++ for AIX versions 2 and 3 are no longer supported and no APAR will be issued. Customers are encouraged to upgrade to a later compiler version.
References
AIX Source Code Browser Buffer Overflow Vulnerability
References:
References:
- AIX Fix Distribution Service (IBM)
- IBM Support Databases (IBM)