PT-2004-1653 · Ibm · Lvm For Aix

Published 2004-06-10 · Updated 2017-07-11 · CVE-2004-0544

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LVM for AIX versions 5.1 through 5.2

Description The issue is related to multiple buffer overflows that allow local users to gain privileges. This can be achieved via the putlvcb or getlvcb commands.

Recommendations For LVM for AIX versions 5.1 through 5.2, consider restricting access to the putlvcb and getlvcb commands until a patch is available. As a temporary workaround, limit the use of these commands to necessary users only. Avoid using the putlvcb and getlvcb commands with untrusted input until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2004-0544

Affected Products

Lvm For Aix

References · 14

• 🔥 https://exploit-db.com/exploits/23840 · Exploit
• 🔥 http://securityfocus.com/bid/9905 · Exploit
• 🔥 https://exploit-db.com/exploits/23841 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-0544 · Security Note
• http://ciac.org/ciac/bulletins/o-131.shtml · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=isg1IY55682 · Vendor Advisory
• http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2004.0544.2 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=isg1IY55681 · Vendor Advisory
• http://securityfocus.com/bid/9906 · Note
• http://osvdb.org/4393 · Note
• http://osvdb.org/4392 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15555 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18317 · Note
• http://secunia.com/advisories/11158 · Note