PT-2007-5534 · Ibm · Ibm Aix

Published 2007-08-15 · Updated 2017-07-29 · CVE-2007-4353

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.2 through 5.3

Description The issue involves multiple buffer overflows that allow local users in the system group to gain root privileges. This is achieved through unspecified vectors involving the chpath, rmpath, and devinstall programs in bos.rte.methods.

Recommendations For IBM AIX versions 5.2 and 5.3, consider restricting access to the chpath, rmpath, and devinstall programs in bos.rte.methods until a patch is available. As a temporary workaround, consider disabling the bos.rte.methods package to minimize the risk of exploitation. Restrict local users' access to the system group to prevent potential privilege escalation.

Fix

Related Identifiers

CVE-2007-4353

Affected Products

Ibm Aix

References · 9

• ftp://aix.software.ibm.com/aix/efixes/security/README · Patch
• http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01433 · Vendor Advisory
• http://secunia.com/advisories/26420 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-4353 · Security Note
• http://www-1.ibm.com/support/docview.wss?uid=isg1IZ00531 · Vendor Advisory
• http://securityfocus.com/bid/25270 · Note
• http://vupen.com/english/advisories/2007/2860 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35971 · Note
• http://securitytracker.com/id?1018549 · Note