PT-2007-5534 · Ibm · Ibm Aix

Publicado 2007-08-15 · Atualizado 2017-07-29 · CVE-2007-4353

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.2 through 5.3

Description The issue involves multiple buffer overflows that allow local users in the system group to gain root privileges. This is achieved through unspecified vectors involving the chpath, rmpath, and devinstall programs in bos.rte.methods.

Recommendations For IBM AIX versions 5.2 and 5.3, consider restricting access to the chpath, rmpath, and devinstall programs in bos.rte.methods until a patch is available. As a temporary workaround, consider disabling the bos.rte.methods package to minimize the risk of exploitation. Restrict local users' access to the system group to prevent potential privilege escalation.

Correção

Identificadores relacionados

CVE-2007-4353

Produtos afetados

Ibm Aix

Referências · 9

• ftp://aix.software.ibm.com/aix/efixes/security/README · Correção
• http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01433 · Aviso do Fabricante
• http://secunia.com/advisories/26420 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-4353 · Nota de Segurança
• http://securityfocus.com/bid/25270 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=isg1IZ00531 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/2860 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35971 · Nota
• http://securitytracker.com/id?1018549 · Nota