PT-2001-1857 · Ibm · Aix

Published 2001-11-22 · Updated 2008-09-05 · CVE-2001-0671

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: AIX versions 4.3 through 5.1

Description: The issue concerns buffer overflows in certain functions within the lpd service of AIX, specifically in send status, kill print, and chk fhost. This allows remote attackers to potentially gain root privileges.

Recommendations: For AIX versions 4.3 through 5.1, consider disabling the lpd service until a patch is available to prevent potential exploitation.

Fix

Related Identifiers

CVE-2001-0671

Affected Products

Aix

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2001-0671 · Security Note
• http://kb.cert.org/vuls/id/722143 · Patch
• http://cert.org/advisories/CA-2001-30.html · Patch
• http://kb.cert.org/vuls/id/466239 · Patch
• http://kb.cert.org/vuls/id/388183 · Patch