Secunia

Two vulnerabilities have been reported in IBM AIX, which can be exploited by malicious people to compromise a vulnerable system.

1) A boundary error in the calendar daemon library "libcsa.a" can be exploited to cause a stack-based buffer overflow by sending a specially crafted request with an overly long argument for remote procedure 21 to the Calendar Manager RPC daemon (rpc.cmsd).

2) An error exists in the Calendar Manager RPC daemon (rpc.cmsd) and can be exploited to cause a buffer overflow.

For more information see vulnerability #1:
SA42984

Successful exploitation of these vulnerabilities may allow execution of arbitrary code.

The vulnerabilities are reported in AIX 5.3 and 6.1, and VIOS 1.4, 1.5, and 2.1. Prior versions may also be affected.

Solution
Apply the security fix or APARs as soon as they become available.
Further details available in Customer Area

Provided and/or discovered by
1) Rodrigo Rubira Branco (BSDaemon) via iDefense.
2) Rodrigo Rubira Branco (BSDaemon) via ZDI.

Changelog
Further details available in Customer Area

Original Advisory
IBM:
http://aix.software.ibm.com/aix/efixes/security/cmsd_advisory.asc

iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=825

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-11-062/

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area