aix allows clearing the interface stats

2000-09-04T00:00:00
ID SECURITYVULNS:DOC:629
Type securityvulns
Reporter Securityvulns
Modified 2000-09-04T00:00:00

Description

hallo,

aix versions 4.x.x will let a non-priveledged user clear the network interface statistics, thus annoying system administrators and interfering with the system scripts that depend on those numbers >:-]

$ netstat -in --> shows stats $ netstat -Zi --> clears them without checking the uid

ibm was informed about a month ago and the problem was taken care of.

bye,

-alexm the bandwidthwaister