|
|
|
IBM AIX Multiple Privilege Escalation Vulnerabilities
|
|
Secunia Advisory:
|
SA27437
|
|
|
Release Date:
|
2007-10-31
|
|
Last Update:
|
2008-09-11
|
|
Popularity:
|
7,844 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Privilege escalation
|
|
Where:
|
Local system
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | AIX 5.x
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 2 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Solution:
Apply interim fixes or APARs as soon as they become available:
http://www.ibm.com/servers/eserver/support/unixservers/aixfixes.html
Interim fixes:
ftp://aix.software.ibm.com/aix/efixes/security/bellmail_ifix.tar
ftp://aix.software.ibm.com/aix/efixes/security/ftp_ifix.tar
ftp://aix.software.ibm.com/aix/efixes/security/lquerypv_ifix.tar
ftp://aix.software.ibm.com/aix/efixes/security/lqueryvg_ifix.tar
ftp://aix.software.ibm.com/aix/efixes/security/dig_ifix.tar
ftp://aix.software.ibm.com/aix/efixes/security/crontab_ifix.tar
ftp://aix.software.ibm.com/aix/efixes/security/cfgcon_ifix.tar
ftp://aix.software.ibm.com/aix/efixes/security/tftp_ifix.tar
AIX 5.2.0:
APAR IZ05066
APAR IZ05487
APAR IZ05877
APAR IZ05349
APAR IZ05017
APAR IZ04832
APAR IZ03055
APAR IZ03054
AIX 5.3.0:
APAR IZ05065/IZ05568
APAR IZ05488/IZ06075
APAR IZ05971/IZ06079
APAR IZ05129/IZ05200
APAR IZ03061/IZ02851
APAR IZ03060/IZ03392
APAR IZ05053/IZ06074
Provided and/or discovered by:
1-2) Joshua J. Drake, VeriSign iDefense Labs
3-4) Sean Larsson, VeriSign iDefense Labs
5) Anonymous researcher, reported via iDefense Labs
6) Anonymous researcher, reported via iDefense Labs
7) Alex DeLarge, reported via iDefense Labs
8) Reported by the vendor.
Changelog:
2007-11-07: Added CVE reference.
2007-12-12: Updated "Solution" section. Added APARs for AIX 5.3.0.
2008-09-11: Added CVE reference.
Original Advisory:
IBM:
http://www14.software.ibm.com/webapp/...3&topic=SECURITY&month=200710
http://www14.software.ibm.com/webapp/...2&topic=SECURITY&month=200710
iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=617
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=616
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=615
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=614
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=613
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=612
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=611
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
25th Nov, 2009
|
New advisories:
|
15 |
|
New vulnerabilities:
|
22 |
|
Updated advisories:
|
20 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
 Solutions | More...
|
|
|
|
Send Feedback to Secunia
|
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
|
|
|
|
|
|
|
