PT-2003-1803 · Ibm · Aix

Published 2003-09-23 · Updated 2008-09-10 · CVE-2003-0697

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: AIX versions 4.3 through 5.2

Description: The issue is related to a format string vulnerability in the lpd component of the bos.rte.printers fileset. When debug is enabled, this can allow local users to cause a denial of service, resulting in a system crash, or potentially gain root privileges.

Recommendations: For AIX versions 4.3 through 5.2, consider disabling the debug mode for the lpd component in the bos.rte.printers fileset as a temporary workaround to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2003-0697

Affected Products

Aix

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2003-0697 · Security Note
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY45344&apar=only · Vendor Advisory
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY46256&apar=only · Vendor Advisory
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY45250&apar=only · Vendor Advisory
• http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2003.1605.1 · Note