AIX 5.2 TL 0 : errpt (IZ19905)

The errpt command contains a buffer which can overflow. A local attacker may exploit this overflow to execute arbitrary code with root privileges because the command is setuid root. The following files are vulnerable : /usr/bin/errpt. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text ...

CVE-2008-2514

The CVE concerns a buffer overflow in AIX’s errpt (/usr/bin/errpt) affecting IBM AIX 5.2, 5.3, and 6.1. A local attacker can exploit the overflow to gain root privileges; attack vectors are not specified in the provided documents. Nessus/ISV entries (IZ19905, IZ21494, IZ22346, IZ22347, IZ22348) r...