PT-2006-1729 · Ibm · Ibm Aix

Published 2006-02-13 · Updated 2017-07-20 · CVE-2006-0674

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.2 through 5.3 L

Description The issue is related to a buffer overflow in the arp command, which can be exploited by local users to cause a denial of service, resulting in a system crash. This is achieved by providing a long iftype argument.

Recommendations For IBM AIX versions 5.2 through 5.3 L, consider restricting access to the arp command until a fix is available. As a temporary workaround, avoid using long iftype arguments in the arp command to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-0674

Affected Products

Ibm Aix

References · 7

• http://securityfocus.com/bid/16584 · Patch
• http://www-1.ibm.com/support/docview.wss?rs=0&q1=IY81424&uid=isg1IY81424&loc=en_US&cs=utf-8&cc=us&lang=en · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=isg1IY81476 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0674 · Security Note
• http://secunia.com/advisories/18773 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24628 · Note
• http://vupen.com/english/advisories/2006/0531 · Note