PT-2009-4256 · Ibm · Libc+1

Affix · Published 2009-05-26 · Updated 2017-09-29 · CVE-2009-1786

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: IBM AIX versions 5.3 through 6.1

Description: The issue concerns the malloc subsystem in libc, which allows local users to create or overwrite arbitrary files via a symlink attack on the log file associated with the MALLOCDEBUG environment variable.

Recommendations: For IBM AIX versions 5.3 through 6.1, consider restricting access to the MALLOCDEBUG environment variable to prevent exploitation. As a temporary workaround, avoid using the MALLOCDEBUG environment variable until a patch is available.

Exploit

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2009-1786

Affected Products

Aix

Libc

References · 19

• 🔥 https://exploit-db.com/exploits/9306 · Exploit
• 🔥 https://exploit-db.com/exploits/33001 · Exploit
• http://ibm.com/support/docview.wss?uid=isg1IZ50445 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=isg1IZ50121 · Vendor Advisory
• http://secunia.com/advisories/35146 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=isg1IZ50139 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1786 · Security Note
• http://aix.software.ibm.com/aix/efixes/security/libc_advisory.asc · Vendor Advisory
• http://securitytracker.com/id?1022261 · Patch
• http://ibm.com/support/docview.wss?uid=isg1IZ50517 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=isg1IZ50129 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=isg1IZ50447 · Vendor Advisory
• http://vupen.com/english/advisories/2009/1380 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=isg1IZ50500 · Vendor Advisory
• http://securityfocus.com/bid/35034 · Note