IBM AIX secldapclntd Unauthorized Data Access Vulnerability

Bugtraq ID:	7264
Class:	Input Validation Error
CVE:	CVE-2003-0119
Remote:	Yes
Local:	No
Published:	Mar 03 2003 12:00AM
Updated:	Jul 11 2009 09:06PM
Credit:	This vulnerability was reported in a IBM advisory.
Vulnerable:	IBM AIX 4.3.3 IBM AIX 4.3 IBM AIX 5.2 IBM AIX 5.1
Not Vulnerable:

IBM AIX secldapclntd Unauthorized Data Access Vulnerability

A vulnerability has been reported for IBM AIX systems using LDAP. The vulnerability exists in the secldapclntd service.

An attacker can exploit this vulnerability by crafting a special LDAP message which would allow an attacker to gain unauthorized access to data. In some cases it may be possible for a remote attacker to modify user accounts on the LDAP server.

IBM AIX secldapclntd Unauthorized Data Access Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

IBM AIX secldapclntd Unauthorized Data Access Vulnerability

Solution:
The following APARs are available:


IBM AIX 5.1

• IBM IY40228
  This APAR will be available approximately 28/04/2003.
  http://techsupport.services.ibm.com/server/aix.fdc


• IBM secldap_efix.tar.Z
  This is a temporary fix.
  ftp://aix.software.ibm.com/aix/efixes/security/secldap_efix.tar.Z

IBM AIX 5.2

• IBM IY40157
  http://techsupport.services.ibm.com/server/aix.fdc

IBM AIX 4.3.3

• IBM IY40510
  http://techsupport.services.ibm.com/rs6k/fixdb.html


• IBM secldap_efix.tar.Z
  This is a temporary fix.
  ftp://aix.software.ibm.com/aix/efixes/security/secldap_efix.tar.Z

IBM AIX secldapclntd Unauthorized Data Access Vulnerability

References:

• Remote secldapclntd compromise. (IBM)