• info
• discussion
• exploit
• solution
• references

IBM AIX Inventory Scout Local Arbitrary File Overwrite Vulnerability

Solution:
IBM has released an advisory and interim fixes to address this issue. Please see the references for more information.


IBM AIX 5.2

• IBM invscoutClient_VPD_Survey.tar.Z
  ftp://aix.software.ibm.com/aix/efixes/security/invscoutClient_VPD_Surv ey.tar.Z


• IBM IY88735 AIX 5.2
  http://www-03.ibm.com/servers/eserver/support/unixservers/aixfixes.htm l


• IBM IY88735 AIX 5.3
  http://www-03.ibm.com/servers/eserver/support/unixservers/aixfixes.htm l

IBM AIX 5.3

• IBM invscoutClient_VPD_Survey.tar.Z
  ftp://aix.software.ibm.com/aix/efixes/security/invscoutClient_VPD_Surv ey.tar.Z


• IBM IY88735 AIX 5.2
  http://www-03.ibm.com/servers/eserver/support/unixservers/aixfixes.htm l


• IBM IY88735 AIX 5.3
  http://www-03.ibm.com/servers/eserver/support/unixservers/aixfixes.htm l