• info
• discussion
• exploit
• solution
• references

IBM AIX Netpmon Command Line Argument Local Buffer Overflow Vulnerability

Solution:
IBM has released Efixes to address this issue.

IBM has released advisory ESB-2005.0139 including APARs to address this issue. The Efixes are being replaced with APARs. Please see the referenced advisory for more information.


IBM AIX 5.1

• IBM netpmon_efix.tar.Z
  ftp://aix.software.ibm.com/aix/efixes/security/netpmon_efix.tar.Z


• IBM IY67807
  http://www-1.ibm.com/servers/eserver/support/pseries/aixfixes.html

IBM AIX 5.2

• IBM netpmon_efix.tar.Z
  ftp://aix.software.ibm.com/aix/efixes/security/netpmon_efix.tar.Z


• IBM IY67136
  http://www-1.ibm.com/servers/eserver/support/pseries/aixfixes.html

IBM AIX 5.3

• IBM netpmon_efix.tar.Z
  ftp://aix.software.ibm.com/aix/efixes/security/netpmon_efix.tar.Z


• IBM IY67124
  http://www-1.ibm.com/servers/eserver/support/pseries/aixfixes.html