IBM VMM Performance Tools Insufficient Access Controls Privilege Elevation Vulnerability

Bugtraq ID:	8807
Class:	Access Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Oct 04 2002 12:00AM
Updated:	Oct 04 2002 12:00AM
Credit:	This vulnerability was reported by IBM.
Vulnerable:	IBM AIX 4.3 IBM AIX 5.1
Not Vulnerable:

IBM VMM Performance Tools Insufficient Access Controls Privilege Elevation Vulnerability

IBM has reported that specific memory management performance tools fail to carry out sufficient access controls. As a result, an unauthorized malicious local user may be capable of invoking a variety of system calls or commands that could ultimately allow for elevated privileges, possibly to that of the root user.

IBM VMM Performance Tools Insufficient Access Controls Privilege Elevation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

IBM VMM Performance Tools Insufficient Access Controls Privilege Elevation Vulnerability

Solution:
IBM has released APARs to address this issue.


IBM AIX 5.1

• IBM IY35542
  http://techsupport.services.ibm.com/server/aix.fixdist?whichFix=APAR&f ixes=IY35542

IBM AIX 4.3

• IBM IY36422
  http://techsupport.services.ibm.com/server/aix.fixdist?whichFix=APAR&f ixes=IY36422

IBM VMM Performance Tools Insufficient Access Controls Privilege Elevation Vulnerability

References:

• IY35542: SECURITY: PERFVMMSTAT EXTENSION PRIVILEGE ERRORS (IBM)
  
• IY36422: SECURITY: PERFVMMSTAT EXTENSION PRIVILEGE ERRORS (IBM)