ID CVE-2005-3396
Summary Buffer overflow in the chcons (chcon) command in IBM AIX 5.2 and 5.3, when DEBUG MALLOC is enabled, might allow attackers to execute arbitrary code via a long command line argument.
References
Vulnerable Configurations
  • IBM AIX 5.1
    cpe:2.3:o:ibm:aix:5.1
  • IBM AIX 5.1L
    cpe:2.3:o:ibm:aix:5.1l
  • IBM AIX 5.2
    cpe:2.3:o:ibm:aix:5.2
  • IBM AIX 5.2.2
    cpe:2.3:o:ibm:aix:5.2.2
  • IBM AIX 5.2 L
    cpe:2.3:o:ibm:aix:5.2_l
  • IBM AIX 5.3
    cpe:2.3:o:ibm:aix:5.3
  • IBM AIX 5.3 L
    cpe:2.3:o:ibm:aix:5.3_l
CVSS
Base: 7.5 (as of 08-11-2005 - 09:26)
Impact:
Exploitability:
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
nessus via4
  • NASL family AIX Local Security Checks
    NASL id AIX_U804752.NASL
    description The remote host is missing AIX PTF U804752, which is related to the security of the package bos.rte.console.
    last seen 2019-02-21
    modified 2013-03-14
    plugin id 65288
    published 2013-03-13
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=65288
    title AIX 5.3 TL 5 : bos.rte.console (U804752)
  • NASL family AIX Local Security Checks
    NASL id AIX_U477978.NASL
    description The remote host is missing AIX PTF U477978, which is related to the security of the package bos.rte.console.
    last seen 2019-02-21
    modified 2013-03-14
    plugin id 65262
    published 2013-03-13
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=65262
    title AIX 5.2 TL 9 : bos.rte.console (U477978)
oval via4
accepted 2008-05-19T04:00:19.857-04:00
class vulnerability
contributors
name Yuzheng Zhou
organization Hewlett-Packard
definition_extensions
  • comment IBM AIX 5.2 is installed
    oval oval:org.mitre.oval:def:5189
  • comment IBM AIX 5.3 is installed
    oval oval:org.mitre.oval:def:5325
description Buffer overflow in the chcons (chcon) command in IBM AIX 5.2 and 5.3, when DEBUG MALLOC is enabled, might allow attackers to execute arbitrary code via a long command line argument.
family unix
id oval:org.mitre.oval:def:5470
status accepted
submitted 2008-04-11T15:10:44.000-05:00
title IBM AIX buffer overflow in chcon command has unspecified impact
version 40
refmap via4
aixapar
  • IY78241
  • IY78253
bid 15247
sectrack 1015122
secunia 17380
sreason 261
vupen ADV-2005-2253
Last major update 07-03-2011 - 21:26
Published 01-11-2005 - 07:47
Last modified 10-10-2017 - 21:30
Back to Top