Buffer overflow in the pioout program in printers.rte in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via a long command line option.

Buffer overflow vulnerabilities exist in the 'printers.rte' fileset commands listed below. A local attacker may execute arbitrary code with root privileges because the commands are setuid root.

The following commands are vulnerable :

/usr/lib/lpd/pio/etc/pioout The fix for piomkpq for IZ01121 and IZ01122 was not included with this fix package, therefore it has been repackged and included as described below. A local attacker who is a member of the printq group may execute arbitrary code with root privileges because the piomkpq command is setuid root. The following command is vulnerable: /usr/lib/lpd/pio/etc/piomkpq.

The remote host is missing AIX PTF U815029, which is related to the security of the package printers.rte.

Buffer overflow vulnerabilities exist in the 'printers.rte' fileset commands listed below. A local attacker may execute arbitrary code with root privileges because the commands are setuid root.

The following commands are vulnerable :

/usr/lib/lpd/pio/etc/pioout The fix for piomkpq for IZ01121 and IZ01122 was not included with this fix package, therefore it has been repackged and included as described below. A local attacker who is a member of the printq group may execute arbitrary code with root privileges because the piomkpq command is setuid root. The following command is vulnerable: /usr/lib/lpd/pio/etc/piomkpq.

The remote host is missing AIX PTF U815329, which is related to the security of the package printers.rte.

Buffer overflow vulnerabilities exist in the 'printers.rte' fileset commands listed below. A local attacker may execute arbitrary code with root privileges because the commands are setuid root.

The following commands are vulnerable :

/usr/lib/lpd/pio/etc/pioout The fix for piomkpq for IZ01121 and IZ01122 was not included with this fix package, therefore it has been repackged and included as described below. A local attacker who is a member of the printq group may execute arbitrary code with root privileges because the piomkpq command is setuid root. The following command is vulnerable: /usr/lib/lpd/pio/etc/piomkpq.

The remote host is missing AIX PTF U815841, which is related to the security of the package printers.rte.

Buffer overflow vulnerabilities exist in the 'printers.rte' fileset commands listed below. A local attacker may execute arbitrary code with root privileges because the commands are setuid root.

The following commands are vulnerable :

/usr/lib/lpd/pio/etc/pioout The fix for piomkpq for IZ01121 and IZ01122 was not included with this fix package, therefore it has been repackged and included as described below. A local attacker who is a member of the printq group may execute arbitrary code with root privileges because the piomkpq command is setuid root. The following command is vulnerable: /usr/lib/lpd/pio/etc/piomkpq.

The remote host is missing AIX PTF U814192, which is related to the security of the package printers.rte.

Buffer overflow vulnerabilities exist in the 'printers.rte' fileset commands listed below. A local attacker may execute arbitrary code with root privileges because the commands are setuid root.

The following commands are vulnerable :

/usr/lib/lpd/pio/etc/pioout The fix for piomkpq for IZ01121 and IZ01122 was not included with this fix package, therefore it has been repackged and included as described below. A local attacker who is a member of the printq group may execute arbitrary code with root privileges because the piomkpq command is setuid root. The following command is vulnerable: /usr/lib/lpd/pio/etc/piomkpq.

ID	Name	Product	Family	Severity
64313	AIX 6.1 TL 0 : pioout (IZ10844)	Nessus	AIX Local Security Checks	high
64312	AIX 5.3 TL 7 : pioout (IZ10842)	Nessus	AIX Local Security Checks	high
64311	AIX 5.3 TL 0 : pioout (IZ10841)	Nessus	AIX Local Security Checks	high
64310	AIX 5.2 TL 0 : pioout (IZ10840)	Nessus	AIX Local Security Checks	high
32240	AIX 5.2 TL 10 : printers.rte (U815029)	Nessus	AIX Local Security Checks	high
31262	AIX 6.1 : printers.rte (U815329)	Nessus	AIX Local Security Checks	high
31008	AIX 5.3 TL 7 : printers.rte (U815841)	Nessus	AIX Local Security Checks	high
30932	AIX 5.3 TL 6 : printers.rte (U814192)	Nessus	AIX Local Security Checks	high

Detections

Analytics

CVE-2007-5764

high

Tenable Plugins

high

high

high

high

high

high

high

high