[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Patches available for IBM AIX flaws

To: <bugtraq@xxxxxxxxxxxxxxxxx>, <dbsec@xxxxxxxxxxxxx>
Subject: Re: Patches available for IBM AIX flaws
From: "David Litchfield" <davidl@xxxxxxxxxxxxxxx>
Date: Thu, 15 Dec 2005 22:58:24 -0000

Correction:

4) There are arbitrary file data append issues in getShell and getCommand in conjuction with specific settings in the malloc debug system.Both getShell and getCommand are setuid root.

Issue 4 affects AIX versions 5.3, 5.2 and 5.1.

Issue 4 affects only AIX 5.3 and not 5.2 and 5.1 as was indicated. Apologies! Cheers, David

References:
- Patches available for IBM AIX flaws
  - From: NGSSoftware Insight Security Research

Prev by Date: ZRCSA-200505: libremail - "pop.c" Format String Vulnerability
Next by Date: DMA[2005-1214a] - 'Widcomm BTW - Bluetooth for Windows Remote Audio Eavesdropping'
Previous by thread: Patches available for IBM AIX flaws
Next by thread: Re: Patches available for IBM AIX flaws
Index(es):
- Date
- Thread