Ibm aix 'getpwnam () 'Local Privilege Escalation Vulnerability

 

Release date:
Updated on:

Affected Systems:
Ibm aix 7.1
Ibm aix 6.1
Ibm aix 5.3
Description:
--------------------------------------------------------------------------------
Bugtraq id: 53393
Cve id: CVE-2012-0745

AIX is an open standard UNIX operating system that provides you with an enterprise information technology infrastructure.

Ibm aix 5.3, 6.1, and 7.1 have the local privilege escalation vulnerability. Local attackers can exploit this vulnerability to gain privilege escalation.

<* Source: vendor

Link: http://aix.software.ibm.com/aix/efixes/security/ldapauth_advisory2.asc
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

IBM
---
For this reason, IBM has released a Security Bulletin (ldapauth_advisory2) and corresponding patches:

Ldapauth_advisory2: Vulnerability in LDAP Authentication

Link: http://aix.software.ibm.com/aix/efixes/security/ldapauth_advisory2.asc