Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a long x= argument.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Aix | Ibm | 4.2 (including) | 4.2 (including) |
| Aix | Ibm | 4.2.1 (including) | 4.2.1 (including) |
| Aix | Ibm | 4.3 (including) | 4.3 (including) |
| Aix | Ibm | 4.3.1 (including) | 4.3.1 (including) |
| Aix | Ibm | 4.3.2 (including) | 4.3.2 (including) |
| Aix | Ibm | 4.3.3 (including) | 4.3.3 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=97569466809056\u0026w=2
- http://www-1.ibm.com/support/search.wss?rs=0\u0026q=IY08812\u0026apar=only
- http://www-1.ibm.com/support/search.wss?rs=0\u0026q=IY10721\u0026apar=only
- http://www.osvdb.org/1676
- http://www.securityfocus.com/bid/2032
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5621
- http://marc.info/?l=bugtraq\u0026m=97569466809056\u0026w=2
- http://www-1.ibm.com/support/search.wss?rs=0\u0026q=IY08812\u0026apar=only
- http://www-1.ibm.com/support/search.wss?rs=0\u0026q=IY10721\u0026apar=only
- http://www.osvdb.org/1676
- http://www.securityfocus.com/bid/2032
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5621