PT-2011-3093 · Ibm · Ibm Aix

Published 2011-11-11 · Updated 2017-08-17 · CVE-2011-1375

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM AIX versions 6.1 through 7.1

Description The issue allows local users to cause a denial of service, resulting in a system crash, by making a crafted system call.

Recommendations For IBM AIX versions 6.1 through 7.1, restrict access to the wpar limits config and wpar limits modify system calls to prevent local users from causing a denial of service.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-1375

Affected Products

Ibm Aix

References · 4

• http://www-01.ibm.com/support/docview.wss?uid=isg1IV10229 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1375 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=isg1IV10227 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71211 · Note