Vulnerabilities > CVE-2005-4272 - Local Buffer Overflow vulnerability in IBM AIX slocal
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
COMPLETE Availability impact
COMPLETE Summary
Multiple buffer overflows in IBM AIX 5.1, 5.2, and 5.3 allow remote attackers to execute arbitrary code via (1) muxatmd and (2) slocal.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
OS | 7 |
Nessus
NASL family AIX Local Security Checks NASL id AIX_U800638.NASL description The remote host is missing AIX PTF U800638, which is related to the security of the package bos.net.tcp.client. last seen 2020-06-01 modified 2020-06-02 plugin id 65268 published 2013-03-13 reporter This script is Copyright (C) 2013-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/65268 title AIX 5.3 TL 4 : bos.net.tcp.client (U800638) code #%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were extracted # from AIX Security PTF U800638. The text itself is copyright (C) # International Business Machines Corp. # include("compat.inc"); if (description) { script_id(65268); script_version("1.2"); script_cvs_date("Date: 2019/09/16 14:12:47"); script_cve_id("CVE-2005-4272"); script_name(english:"AIX 5.3 TL 4 : bos.net.tcp.client (U800638)"); script_summary(english:"Check for PTF U800638"); script_set_attribute( attribute:"synopsis", value:"The remote AIX host is missing a vendor-supplied security patch." ); script_set_attribute( attribute:"description", value: "The remote host is missing AIX PTF U800638, which is related to the security of the package bos.net.tcp.client." ); script_set_attribute( attribute:"see_also", value:"http://www-01.ibm.com/support/docview.wss?uid=isg1IY75541" ); script_set_attribute( attribute:"see_also", value:"http://www-01.ibm.com/support/docview.wss?uid=isg1IY76055" ); script_set_attribute( attribute:"see_also", value:"http://www-01.ibm.com/support/docview.wss?uid=isg1IY78223" ); script_set_attribute( attribute:"solution", value:"Install the appropriate missing security-related fix." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/o:ibm:aix:5.3"); script_set_attribute(attribute:"vuln_publication_date", value:"2005/08/20"); script_set_attribute(attribute:"patch_publication_date", value:"2005/08/20"); script_set_attribute(attribute:"plugin_publication_date", value:"2013/03/13"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2013-2019 Tenable Network Security, Inc."); script_family(english:"AIX Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/AIX/oslevel", "Host/AIX/version", "Host/AIX/lslpp"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("aix.inc"); if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if ( ! get_kb_item("Host/AIX/version") ) audit(AUDIT_OS_NOT, "AIX"); if ( ! get_kb_item("Host/AIX/lslpp") ) audit(AUDIT_PACKAGE_LIST_MISSING); flag = 0; if ( aix_check_patch(ml:"530004", patch:"U800638", package:"bos.net.tcp.client.5.3.0.40") < 0 ) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:aix_report_get()); else security_hole(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");
NASL family AIX Local Security Checks NASL id AIX_U499696.NASL description The remote host is missing AIX PTF U499696, which is related to the security of the package bos.net.tcp.client. last seen 2020-06-01 modified 2020-06-02 plugin id 65265 published 2013-03-13 reporter This script is Copyright (C) 2013-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/65265 title AIX 5.2 TL 8 : bos.net.tcp.client (U499696) code #%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were extracted # from AIX Security PTF U499696. The text itself is copyright (C) # International Business Machines Corp. # include("compat.inc"); if (description) { script_id(65265); script_version("1.2"); script_cvs_date("Date: 2019/09/16 14:12:47"); script_cve_id("CVE-2005-4272"); script_name(english:"AIX 5.2 TL 8 : bos.net.tcp.client (U499696)"); script_summary(english:"Check for PTF U499696"); script_set_attribute( attribute:"synopsis", value:"The remote AIX host is missing a vendor-supplied security patch." ); script_set_attribute( attribute:"description", value: "The remote host is missing AIX PTF U499696, which is related to the security of the package bos.net.tcp.client." ); script_set_attribute( attribute:"see_also", value:"http://www-01.ibm.com/support/docview.wss?uid=isg1IY78222" ); script_set_attribute( attribute:"solution", value:"Install the appropriate missing security-related fix." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/o:ibm:aix:5.2"); script_set_attribute(attribute:"vuln_publication_date", value:"2005/10/27"); script_set_attribute(attribute:"patch_publication_date", value:"2005/10/27"); script_set_attribute(attribute:"plugin_publication_date", value:"2013/03/13"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2013-2019 Tenable Network Security, Inc."); script_family(english:"AIX Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/AIX/oslevel", "Host/AIX/version", "Host/AIX/lslpp"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("aix.inc"); if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if ( ! get_kb_item("Host/AIX/version") ) audit(AUDIT_OS_NOT, "AIX"); if ( ! get_kb_item("Host/AIX/lslpp") ) audit(AUDIT_PACKAGE_LIST_MISSING); flag = 0; if ( aix_check_patch(ml:"520008", patch:"U499696", package:"bos.net.tcp.client.5.2.0.85") < 0 ) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:aix_report_get()); else security_hole(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");
NASL family AIX Local Security Checks NASL id AIX_U804407.NASL description The remote host is missing AIX PTF U804407, which is related to the security of the package bos.mh. last seen 2020-06-01 modified 2020-06-02 plugin id 65280 published 2013-03-13 reporter This script is Copyright (C) 2013-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/65280 title AIX 5.3 TL 4 : bos.mh (U804407) NASL family AIX Local Security Checks NASL id AIX_U804205.NASL description The remote host is missing AIX PTF U804205, which is related to the security of the package bos.mh. last seen 2020-06-01 modified 2020-06-02 plugin id 65279 published 2013-03-13 reporter This script is Copyright (C) 2013-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/65279 title AIX 5.2 TL 8 : bos.mh (U804205)
References
- http://secunia.com/advisories/18088
- http://securitytracker.com/id?1015366
- http://securitytracker.com/id?1015367
- http://www.securityfocus.com/archive/1/419577/100/0/threaded
- http://www.securityfocus.com/bid/15878
- http://www.securityfocus.com/bid/15879
- http://www.vupen.com/english/advisories/2005/2947
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY78221&apar=only
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY78222&apar=only
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY78223&apar=only
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY78224&apar=only
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY78225&apar=only
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY78226&apar=only