IBM AIX GetIPNodeByName API Socket Management Vulnerability

Bugtraq ID:	8738
Class:	Design Error
CVE:	CVE-2003-0696
Remote:	Yes
Local:	No
Published:	Jul 01 2003 12:00AM
Updated:	Jul 11 2009 11:56PM
Credit:	Vulnerability disclosed by IBM.
Vulnerable:	IBM AIX 5.2 IBM AIX 5.1
Not Vulnerable:

IBM AIX GetIPNodeByName API Socket Management Vulnerability

A problem has been reported in the socket handling of IBM AIX. Because of this, an attacker may be able to crash an application on a vulnerable system.

Sendmail is known to use the vulnerable function on IBM AIX systems.

IBM AIX GetIPNodeByName API Socket Management Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

IBM AIX GetIPNodeByName API Socket Management Vulnerability

Solution:
IBM has released APARs to address this issue.


IBM AIX 5.1

• IBM IY46273
  http://www-912.ibm.com/eserver/support/fixes/fcgui.jsp?whichFix=APAR&f ixes=IY46273

IBM AIX 5.2

• IBM IY46024
  http://www-912.ibm.com/eserver/support/fixes/fcgui.jsp?whichFix=APAR&f ixes=IY46024

IBM AIX GetIPNodeByName API Socket Management Vulnerability

References:

• AIX Homepage (IBM)
  
• IY46024: NEED TO CLOSE THE SOCKET OPENED EARLIER (IBM)
  
• IY46273: NEED TO CLOSE THE SOCKET OPENED EARLIER (IBM)