AIX ftpd Remote Buffer Overflow

Bugtraq ID:	679
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 28 1999 12:00AM
Updated:	Sep 28 1999 12:00AM
Credit:	This vulnerability was published in the BUGTRAQ list by Gerrie <[email protected]>.
Vulnerable:	IBM AIX 4.3.2 IBM AIX 4.3.1 IBM AIX 4.3
Not Vulnerable:	IBM AIX 4.2.1 IBM AIX 4.2

AIX ftpd Remote Buffer Overflow

Exploit available:

• /data/vulnerabilities/exploits/aix-ftpd.pl

AIX ftpd Remote Buffer Overflow

Solution:
A temporary fix is available via anonymous ftp from:

ftp://aix.software.ibm.com/aix/efixes/security/ftpd.tar.Z

Filename sum md5 ============================================
ftpd 02584 147 4577818c9c95b47ffc915ab750f36bd3

This temporary fix has not been fully regression tested. Use the following steps (as root) to install the temporary fix:

1. Uncompress and extract the fix.

# uncompress < ftpd.tar.Z | tar xf -
# cd ftpd

2. Replace the vulnerable ftpd.

# mv /usr/sbin/ftpd /usr/sbin/ftpd.before_security_fix
# chown root.system /usr/sbin/ftpd.before_security_fix
# chmod 0 /usr/sbin/ftpd.before_security_fix
# cp ./ftpd /usr/sbin/ftpd
# chown root.system /usr/sbin/ftpd
# chmod 4554 /usr/sbin/ftpd

Official fix

IBM is working on the following fixes which will be available soon.

AIX 4.2.x and earlier: not vulnerable
AIX 4.3.x: IY04477

AIX ftpd Remote Buffer Overflow

References:

• AIX Fix Distribution Service (IBM)
  
• IBM Support Databases (IBM)