Vulnerabilities > CVE-2005-3749 - Local Arbitrary Code Execution vulnerability in IBM AIX Diagela.SH
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
COMPLETE Availability impact
COMPLETE Summary
Unspecified "absolute path vulnerabilities" in the diagela command (diagela.sh) in IBM AIX 5.2 and 5.3 have unknown impact and attack vectors.
Nessus
NASL family AIX Local Security Checks NASL id AIX_U800632.NASL description The remote host is missing AIX PTF U800632, which is related to the security of the package bos.diag.rte. last seen 2020-06-01 modified 2020-06-02 plugin id 65267 published 2013-03-13 reporter This script is Copyright (C) 2013-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/65267 title AIX 5.3 TL 4 : bos.diag.rte (U800632) code #%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were extracted # from AIX Security PTF U800632. The text itself is copyright (C) # International Business Machines Corp. # include("compat.inc"); if (description) { script_id(65267); script_version("1.2"); script_cvs_date("Date: 2019/09/16 14:12:47"); script_cve_id("CVE-2005-3749"); script_name(english:"AIX 5.3 TL 4 : bos.diag.rte (U800632)"); script_summary(english:"Check for PTF U800632"); script_set_attribute( attribute:"synopsis", value:"The remote AIX host is missing a vendor-supplied security patch." ); script_set_attribute( attribute:"description", value: "The remote host is missing AIX PTF U800632, which is related to the security of the package bos.diag.rte." ); script_set_attribute( attribute:"see_also", value:"http://www-01.ibm.com/support/docview.wss?uid=isg1IY78801" ); script_set_attribute( attribute:"solution", value:"Install the appropriate missing security-related fix." ); script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/o:ibm:aix:5.3"); script_set_attribute(attribute:"vuln_publication_date", value:"2005/11/10"); script_set_attribute(attribute:"patch_publication_date", value:"2005/11/10"); script_set_attribute(attribute:"plugin_publication_date", value:"2013/03/13"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2013-2019 Tenable Network Security, Inc."); script_family(english:"AIX Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/AIX/oslevel", "Host/AIX/version", "Host/AIX/lslpp"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("aix.inc"); if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if ( ! get_kb_item("Host/AIX/version") ) audit(AUDIT_OS_NOT, "AIX"); if ( ! get_kb_item("Host/AIX/lslpp") ) audit(AUDIT_PACKAGE_LIST_MISSING); flag = 0; if ( aix_check_patch(ml:"530004", patch:"U800632", package:"bos.diag.rte.5.3.0.40") < 0 ) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:aix_report_get()); else security_hole(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");
NASL family AIX Local Security Checks NASL id AIX_U477539.NASL description The remote host is missing AIX PTF U477539, which is related to the security of the package bos.diag.rte. last seen 2020-06-01 modified 2020-06-02 plugin id 65259 published 2013-03-13 reporter This script is Copyright (C) 2013-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/65259 title AIX 5.2 TL 8 : bos.diag.rte (U477539) code #%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were extracted # from AIX Security PTF U477539. The text itself is copyright (C) # International Business Machines Corp. # include("compat.inc"); if (description) { script_id(65259); script_version("1.2"); script_cvs_date("Date: 2019/09/16 14:12:47"); script_cve_id("CVE-2005-3749"); script_name(english:"AIX 5.2 TL 8 : bos.diag.rte (U477539)"); script_summary(english:"Check for PTF U477539"); script_set_attribute( attribute:"synopsis", value:"The remote AIX host is missing a vendor-supplied security patch." ); script_set_attribute( attribute:"description", value: "The remote host is missing AIX PTF U477539, which is related to the security of the package bos.diag.rte." ); script_set_attribute( attribute:"see_also", value:"http://www-01.ibm.com/support/docview.wss?uid=isg1IY78800" ); script_set_attribute( attribute:"solution", value:"Install the appropriate missing security-related fix." ); script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/o:ibm:aix:5.2"); script_set_attribute(attribute:"vuln_publication_date", value:"2005/11/10"); script_set_attribute(attribute:"patch_publication_date", value:"2005/11/10"); script_set_attribute(attribute:"plugin_publication_date", value:"2013/03/13"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2013-2019 Tenable Network Security, Inc."); script_family(english:"AIX Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/AIX/oslevel", "Host/AIX/version", "Host/AIX/lslpp"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("aix.inc"); if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if ( ! get_kb_item("Host/AIX/version") ) audit(AUDIT_OS_NOT, "AIX"); if ( ! get_kb_item("Host/AIX/lslpp") ) audit(AUDIT_PACKAGE_LIST_MISSING); flag = 0; if ( aix_check_patch(ml:"520008", patch:"U477539", package:"bos.diag.rte.5.2.0.85") < 0 ) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:aix_report_get()); else security_hole(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");
References
- http://secunia.com/advisories/17474
- http://securitytracker.com/id?1015212
- http://www.osvdb.org/20768
- http://www.securityfocus.com/bid/15397
- http://www.vupen.com/english/advisories/2005/2392
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY78800&apar=only
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY78801&apar=only
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY78926&apar=only
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23108