• info
• discussion
• exploit
• solution
• references

IBM AIX Netpmon Command Line Argument Local Buffer Overflow Vulnerability

netpmon is prone to a local buffer overflow vulnerability.

Reportedly, a user requires gid system privileges to execute the utility. A successful attack can grant the user superuser privileges.

IBM AIX 5.1, 5.2, and 5.3 are considered vulnerable at the moment.