The secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with the loadmodule, which allows remote attackers to directly connect to the daemon and conduct unauthorized activities.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Aix | Ibm | 4.3.3 (including) | 4.3.3 (including) |
| Aix | Ibm | 5.1 (including) | 5.1 (including) |
| Aix | Ibm | 5.2 (including) | 5.2 (including) |
References
- http://secunia.com/advisories/8221
- http://www-1.ibm.com/services/continuity/recover1.nsf/4699c03b46f2d4f68525678c006d45ae/85256a3400529a8685256cde0008ddde?OpenDocument
- http://www.kb.cert.org/vuls/id/624713
- http://www.securityfocus.com/bid/7264
- http://secunia.com/advisories/8221
- http://www-1.ibm.com/services/continuity/recover1.nsf/4699c03b46f2d4f68525678c006d45ae/85256a3400529a8685256cde0008ddde?OpenDocument
- http://www.kb.cert.org/vuls/id/624713
- http://www.securityfocus.com/bid/7264