PT-2007-4926 · Ibm · Ibm Aix+1

Publicado 2007-07-11 · Atualizado 2017-07-29 · CVE-2007-3680

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.2.0 through 5.3.0

Description The issue is related to a stack-based buffer overflow in the odm searchpath function within the libodm library. This allows local users to execute arbitrary code by manipulating the ODMPATH environment variable, specifically by making it excessively long.

Recommendations For IBM AIX versions 5.2.0 through 5.3.0, consider restricting access to the odm searchpath function until a patch is available. As a temporary workaround, limit the length of the ODMPATH environment variable to prevent exploitation.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-3680

Produtos afetados

Ibm Aix

Libodm

Referências · 10

• http://osvdb.org/36760 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35321 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3680 · Nota de Segurança
• http://vupen.com/english/advisories/2007/2476 · Nota
• ftp://aix.software.ibm.com/aix/efixes/security/README · Nota
• http://www-1.ibm.com/support/docview.wss?uid=isg1IY97632 · Aviso do Fabricante
• http://securityfocus.com/bid/24841 · Nota
• http://securitytracker.com/id?1018345 · Aviso do Fabricante
• http://secunia.com/advisories/25970 · Aviso do Fabricante
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=552 · Correção