|
|
>> IBM AIX "setlocale()" Function Unspecified Local Privilege Escalation Vulnerability
|
Title : IBM AIX "setlocale()" Function Unspecified Local Privilege Escalation Vulnerability
VUPEN ID : VUPEN/ADV-2006-3327
CVE ID : CVE-2006-4254
Rated as : Moderate Risk 
Remotely Exploitable : No
Locally Exploitable : Yes
Release Date : 2006-08-21
|
A vulnerability has been identified in IBM AIX, which could be exploited by malicious users to obtain elevated privileges. This flaw is due to an unspecified error within the "setlocale()" function in "libc.a", which could be exploited by local attackers to elevate their privileges.
Affected Products
IBM AIX 5.1.0
IBM AIX 5.2.0
IBM AIX 5.3.0
Solution
Interim fix :
ftp://aix.software.ibm.com/aix/efixes/security/setlocale_ifix.tar.Z
AIX 5.1.0 - Apply APAR IY88528 (available approx. 2006-09-06)
AIX 5.2.0 - Apply APAR IY88512 (available approx. 2006-09-06)
AIX 5.3.0 - Apply APAR IY88183 (available approx. 2006-09-06)
References
http://www.vupen.com/english/advisories/2006/3327
Credits
Vulnerability reported by the vendor
ChangeLog
2006-08-21 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
