Vulnerabilities > CVE-2007-4353 - Buffer Overflow vulnerability in IBM AIX Configuration Commands
Attack vector
LOCAL Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
COMPLETE Availability impact
COMPLETE Summary
Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain root privileges via unspecified vectors involving the (1) chpath, (2) rmpath, and (3) devinstall programs in bos.rte.methods.
Nessus
NASL family AIX Local Security Checks NASL id AIX_U811914.NASL description The remote host is missing AIX PTF U811914, which is related to the security of the package bos.rte.methods. last seen 2020-06-01 modified 2020-06-02 plugin id 28943 published 2007-12-03 reporter This script is Copyright (C) 2007-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/28943 title AIX 5.3 TL 6 : bos.rte.methods (U811914) code #%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were extracted # from AIX Security PTF U811914. The text itself is copyright (C) # International Business Machines Corp. # include("compat.inc"); if (description) { script_id(28943); script_version ("1.6"); script_cvs_date("Date: 2019/09/16 14:12:48"); script_cve_id("CVE-2007-4353"); script_name(english:"AIX 5.3 TL 6 : bos.rte.methods (U811914)"); script_summary(english:"Check for PTF U811914"); script_set_attribute( attribute:"synopsis", value:"The remote AIX host is missing a vendor-supplied security patch." ); script_set_attribute( attribute:"description", value: "The remote host is missing AIX PTF U811914, which is related to the security of the package bos.rte.methods." ); script_set_attribute( attribute:"see_also", value:"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ01433" ); script_set_attribute( attribute:"solution", value:"Install the appropriate missing security-related fix." ); script_set_cvss_base_vector("CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/o:ibm:aix:5.3"); script_set_attribute(attribute:"vuln_publication_date", value:"2007/07/12"); script_set_attribute(attribute:"patch_publication_date", value:"2007/07/12"); script_set_attribute(attribute:"plugin_publication_date", value:"2007/12/03"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2007-2019 Tenable Network Security, Inc."); script_family(english:"AIX Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/AIX/oslevel", "Host/AIX/version", "Host/AIX/lslpp"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("aix.inc"); if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if ( ! get_kb_item("Host/AIX/version") ) audit(AUDIT_OS_NOT, "AIX"); if ( ! get_kb_item("Host/AIX/lslpp") ) audit(AUDIT_PACKAGE_LIST_MISSING); flag = 0; if ( aix_check_patch(ml:"530006", patch:"U811914", package:"bos.rte.methods.5.3.0.62") < 0 ) flag++; if (flag) { if (report_verbosity > 0) security_warning(port:0, extra:aix_report_get()); else security_warning(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");
NASL family AIX Local Security Checks NASL id AIX_U809780.NASL description The remote host is missing AIX PTF U809780, which is related to the security of the package bos.rte.odm. last seen 2020-06-01 modified 2020-06-02 plugin id 28778 published 2007-12-03 reporter This script is Copyright (C) 2007-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/28778 title AIX 5.2 TL 10 : bos.rte.odm (U809780) code #%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were extracted # from AIX Security PTF U809780. The text itself is copyright (C) # International Business Machines Corp. # include("compat.inc"); if (description) { script_id(28778); script_version ("1.6"); script_cvs_date("Date: 2019/09/16 14:12:48"); script_cve_id("CVE-2007-4353"); script_name(english:"AIX 5.2 TL 10 : bos.rte.odm (U809780)"); script_summary(english:"Check for PTF U809780"); script_set_attribute( attribute:"synopsis", value:"The remote AIX host is missing a vendor-supplied security patch." ); script_set_attribute( attribute:"description", value: "The remote host is missing AIX PTF U809780, which is related to the security of the package bos.rte.odm." ); script_set_attribute( attribute:"see_also", value:"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ00531" ); script_set_attribute( attribute:"solution", value:"Install the appropriate missing security-related fix." ); script_set_cvss_base_vector("CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/o:ibm:aix:5.2"); script_set_attribute(attribute:"vuln_publication_date", value:"2007/06/21"); script_set_attribute(attribute:"patch_publication_date", value:"2007/06/21"); script_set_attribute(attribute:"plugin_publication_date", value:"2007/12/03"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2007-2019 Tenable Network Security, Inc."); script_family(english:"AIX Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/AIX/oslevel", "Host/AIX/version", "Host/AIX/lslpp"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("aix.inc"); if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if ( ! get_kb_item("Host/AIX/version") ) audit(AUDIT_OS_NOT, "AIX"); if ( ! get_kb_item("Host/AIX/lslpp") ) audit(AUDIT_PACKAGE_LIST_MISSING); flag = 0; if ( aix_check_patch(ml:"520010", patch:"U809780", package:"bos.rte.odm.5.2.0.106") < 0 ) flag++; if (flag) { if (report_verbosity > 0) security_warning(port:0, extra:aix_report_get()); else security_warning(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");
References
- ftp://aix.software.ibm.com/aix/efixes/security/README
- http://secunia.com/advisories/26420
- http://www.securityfocus.com/bid/25270
- http://www.securitytracker.com/id?1018549
- http://www.vupen.com/english/advisories/2007/2860
- http://www-1.ibm.com/support/docview.wss?uid=isg1IZ00531
- http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01433
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35971