PT-2006-1729 · Ibm · Ibm Aix

Publicado 2006-02-13 · Atualizado 2017-07-20 · CVE-2006-0674

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.2 through 5.3 L

Description The issue is related to a buffer overflow in the arp command, which can be exploited by local users to cause a denial of service, resulting in a system crash. This is achieved by providing a long iftype argument.

Recommendations For IBM AIX versions 5.2 through 5.3 L, consider restricting access to the arp command until a fix is available. As a temporary workaround, avoid using long iftype arguments in the arp command to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-0674

Produtos afetados

Ibm Aix

Referências · 7

• http://securityfocus.com/bid/16584 · Correção
• http://www-1.ibm.com/support/docview.wss?rs=0&q1=IY81424&uid=isg1IY81424&loc=en_US&cs=utf-8&cc=us&lang=en · Aviso do Fabricante
• http://www-1.ibm.com/support/docview.wss?uid=isg1IY81476 · Aviso do Fabricante
• http://secunia.com/advisories/18773 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24628 · Nota
• http://vupen.com/english/advisories/2006/0531 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0674 · Nota de Segurança