iDEFENSE has reported a vulnerability in IBM AIX, which can be exploited by malicious, local users to gain escalated privileges.

The vulnerability is caused due to a boundary error in the netpmon program when handling arguments passed to the "-O" command line option. This can be exploited to cause a stack-based buffer overflow by passing an overly long string.

Successful exploitation allows users in the "system" group to execute arbitrary code with root privileges.

The vulnerability affects AIX 5.1, 5.2 and 5.3.

Solution
The vendor recommends setting the mode bits on the affected file to "500" or applying the efix.
Further details available to Secunia VIM customers

Provided and/or discovered by
iDEFENSE Labs

Changelog
Further details available to Secunia VIM customers

Original Advisory
iDEFENSE:
http://www.idefense.com/application/poi/display?id=197&type=vulnerabilities

Deep Links
Links available to Secunia VIM customers