PT-2004-1653 · Ibm · Lvm For Aix

Publicado 2004-06-10 · Atualizado 2017-07-11 · CVE-2004-0544

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LVM for AIX versions 5.1 through 5.2

Description The issue is related to multiple buffer overflows that allow local users to gain privileges. This can be achieved via the putlvcb or getlvcb commands.

Recommendations For LVM for AIX versions 5.1 through 5.2, consider restricting access to the putlvcb and getlvcb commands until a patch is available. As a temporary workaround, limit the use of these commands to necessary users only. Avoid using the putlvcb and getlvcb commands with untrusted input until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2004-0544

Produtos afetados

Lvm For Aix

Referências · 14

• 🔥 https://exploit-db.com/exploits/23840 · Exploit
• 🔥 http://securityfocus.com/bid/9905 · Exploit
• 🔥 https://exploit-db.com/exploits/23841 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-0544 · Nota de Segurança
• http://securityfocus.com/bid/9906 · Nota
• http://osvdb.org/4393 · Nota
• http://ciac.org/ciac/bulletins/o-131.shtml · Aviso do Fabricante
• http://osvdb.org/4392 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15555 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=isg1IY55682 · Aviso do Fabricante
• http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2004.0544.2 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18317 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=isg1IY55681 · Aviso do Fabricante
• http://secunia.com/advisories/11158 · Nota