IBM OS/400 BrSmRcvAndCheck()远程溢出漏洞

BUGTRAQ ID: 29660 IBM OS/400是IBM网络服务器上所运行的操作系统。 IBM OS/400在modem端口上执行诊断时，IBM OS/400中由BrSmIntWrap所调用的BrSmRcvAndCheck函数未经长度检查便执行了memcpy操作。如果远程攻击者提交了超长参数的话，就可能触发缓冲区溢出，导致初始程序加载（IPL）bootstrap进程终止。 IBM OS/400 V6R1M0 IBM OS/400 V5R4M5 IBM OS/400 V5R4M0 IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2008-2709: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 allows local users to cause a denial of service task halt and main storage dump via unspecified vectors involving the running of diagnostics on a modem port. NOTE: there might be limited...