IBM AIX lpd Local Format String Vulnerability

Bugtraq ID:	8646
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Sep 18 2003 12:00AM
Updated:	Sep 18 2003 12:00AM
Credit:	This vulnerability was reported by IBM.
Vulnerable:	IBM AIX 4.3.3 IBM AIX 4.3 IBM AIX 5.2 IBM AIX 5.1
Not Vulnerable:

IBM AIX lpd Local Format String Vulnerability

IBM has released a security advisory stating that a local format string vulnerability has been discovered in lpd on AIX systems. The problem occurs due to the incorrect usage of functions designed to take formatted arguments. As a result, a local attacker in a specific group may be capable of exploiting this format string bug to gain root privileges on the affected system.

IBM AIX lpd Local Format String Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

IBM AIX lpd Local Format String Vulnerability

Solution:
IBM has reportedly released APARs in a security advisory to address this issue. Further information can be obtained by contacting the vendor. See referenced advisory for more details.


IBM AIX 5.1

• IBM IY46256
  http://techsupport.services.ibm.com/server/aix.fdc

IBM AIX 5.2

• IBM IY45344
  http://techsupport.services.ibm.com/server/aix.fdc

IBM AIX 4.3.3

• IBM IY45250
  http://techsupport.services.ibm.com/rs6k/fixdb.html

IBM AIX lpd Local Format String Vulnerability

References:

• AIX Homepage (IBM)
  
• lpd format string vulnerability (MSS-OAR-E01-2003.1605.1) (IBM)