Buffer overflow

Multiple buffer overflows in 1 mkque and 2 mkquedev in bos.rte.printers in IBM AIX 6.1 and 7.1 allow local users to gain privileges by leveraging printq group membership...

CVE-2013-5419

Multiple buffer overflows in 1 mkque and 2 mkquedev in bos.rte.printers in IBM AIX 6.1 and 7.1 allow local users to gain privileges by leveraging printq group membership...

CVE-2013-5419

The CVE-2013-5419 issue affects IBM AIX 6.1 and 7.1; buffer overflows in mkque and mkquedev (bos.rte.printers) allow local privilege escalation for users in the printq group. Root-owned SUID programs and a misconfigured printq group enable exploitation. IBM-vetted fixes are provided via APARs IV5...

AIX 6.1 TL 8 : cmdque (IV47428)

Printer commands mkque and mkquedev are susceptible to buffer overflow by users belonging to the 'printq' group. These commands are owned by 'root' and SUID bit set. The group is set to 'printq'. By default, no users are belong to the 'printq'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

AIX 7.1 TL 1 : cmdque (IV47429)

Printer commands mkque and mkquedev are susceptible to buffer overflow by users belonging to the 'printq' group. These commands are owned by 'root' and SUID bit set. The group is set to 'printq'. By default, no users are belong to the 'printq'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

AIX 7.1 TL 2 : cmdque (IV47430)

Printer commands mkque and mkquedev are susceptible to buffer overflow by users belonging to the 'printq' group. These commands are owned by 'root' and SUID bit set. The group is set to 'printq'. By default, no users are belong to the 'printq'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

AIX 6.1 TL 7 : cmdque (IV47427)

Printer commands mkque and mkquedev are susceptible to buffer overflow by users belonging to the 'printq' group. These commands are owned by 'root' and SUID bit set. The group is set to 'printq'. By default, no users are belong to the 'printq'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

AIX printer commands vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Wed Sept 25 15:55:39 CDT 2013 | Updated: Wed Feb 26 12:48:22 CDT 2014 | Update: Modified APAR availability dates and corrected | some APAR SP levels. | Update: 1. Replaced ifixes to resolve a prerequisite issue. | 2...

IBM AIX 6.1 / 7.1 Local Root Privilege Escalation

!/bin/sh Exploit Title: IBM AIX 6.1 / 7.1 local root privilege escalation Date: 2013-09-24 Exploit Author: Kristian Erik Hermansen Vendor Homepage: http://www.ibm.com Software Link: http://www-03.ibm.com/systems/power/software/aix/about.html Version: IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26...

IBM AIX 6.1 / 7.1 - Local root Privilege Escalation Vulnerability

Exploit for aix platform in category local exploits !/bin/sh Exploit Title: IBM AIX 6.1 / 7.1 local root privilege escalation Date: 2013-09-24 Exploit Author: Kristian Erik Hermansen Vendor Homepage: http://www.ibm.com Software Link: http://www-03.ibm.com/systems/power/software/aix/about.html...

IBM AIX 6.17.1 - Local Privilege Escalation

IBM AIX 6.17.1 - Local Privilege Escalation Exploit-DB Note: Screenshot provided by exploit author !/bin/sh Exploit Title: IBM AIX 6.1 / 7.1 local root privilege escalation Date: 2013-09-24 Exploit Author: Kristian Erik Hermansen Vendor Homepage: http://www.ibm.com Software Link:...

IBM AIX 6.1/7.1 - Local Privilege Escalation

Exploit-DB Note: Screenshot provided by exploit author !/bin/sh Exploit Title: IBM AIX 6.1 / 7.1 local root privilege escalation Date: 2013-09-24 Exploit Author: Kristian Erik Hermansen Vendor Homepage: http://www.ibm.com Software Link: http://www-03.ibm.com/systems/power/software/aix/about.html...

ibstat $PATH Privilege Escalation

This module exploits the trusted $PATH environment variable of the SUID binary "ibstat". Module Options msf use exploit/aix/local/ibstat/path msf undefinedpath show actions ...actions... msf undefinedpath set ACTION msf undefinedpath show options ...show and set options... msf undefinedpath run...

AIX PowerHA Cluster Management Unspecified Remote Configuration Manipulation

An unspecified vulnerability in the IBM PowerHA Cluster Management monitoring of port 6177 could allow a remote attacker to make unauthorized changes the remote host's AIX configuration. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

AIX 6.1 TL 7 : bos.net.tcp.client (U857721)

The remote host is missing AIX PTF U857721, which is related to the security of the package bos.net.tcp.client. If an AIX machine has IPv6 address configured, and if a malformed IPv6 packet in a specific format is sent to that machine, the machine can hang while processing that packet. The proble...

AIX 6.1 TL 6 : devices.common.IBM.ib.rte (U857762)

The remote host is missing AIX PTF U857762, which is related to the security of the package devices.common.IBM.ib.rte. Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority. %NASLMINLEVEL 70300 C...

AIX 6.1 TL 7 : devices.common.IBM.ib.rte (U859167)

The remote host is missing AIX PTF U859167, which is related to the security of the package devices.common.IBM.ib.rte. Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority. %NASLMINLEVEL 70300 C...

AIX 6.1 TL 6 : bos.perf.perfstat (U857768)

The remote host is missing AIX PTF U857768, which is related to the security of the package bos.perf.perfstat. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U857768. The text itself is copyright C...

AIX 6.1 TL 6 : bos.net.tcp.client (U857748)

The remote host is missing AIX PTF U857748, which is related to the security of the package bos.net.tcp.client. If an AIX machine has IPv6 address configured, and if a malformed IPv6 packet in a specific format is sent to that machine, the machine can hang while processing that packet. The proble...

AIX 7.1 : bos.perf.perfstat (U858372)

The remote host is missing AIX PTF U858372, which is related to the security of the package bos.perf.perfstat. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U858372. The text itself is copyright C...