PT-2007-5689 · Ibm · Ibm Aix

Publicado

2007-11-05

·

Atualizado

2017-09-29

·

CVE-2007-4513

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.2 through 5.3
Description The issue concerns multiple stack-based buffer overflows that allow local users to gain privileges. This can be achieved by providing a long argument to either the -p option to lqueryvg or the -V option to lquerypv.
Recommendations For IBM AIX versions 5.2 and 5.3, consider restricting access to the lqueryvg and lquerypv commands until a patch is available. As a temporary workaround, avoid using the -p option with lqueryvg and the -V option with lquerypv with long arguments to minimize the risk of exploitation.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-4513

Produtos afetados

Ibm Aix