Stack-based buffer overflow in the reboot program on IBM AIX 5.2 and 5.3 allows local users in the shutdown group to gain privileges.

The remote host is missing AIX PTF U816674, which is related to the security of the package bos.rte.control.

The reboot command contains a stack based buffer overflow. A local attacker in the shutdown group may exploit this overflow to execute arbitrary code with root privileges because the command is setuid root.

The following files are vulnerable :

/usr/sbin/reboot.

The remote host is missing AIX PTF U815015, which is related to the security of the package bos.rte.control.

The reboot command contains a stack based buffer overflow. A local attacker in the shutdown group may exploit this overflow to execute arbitrary code with root privileges because the command is setuid root.

The following files are vulnerable :

/usr/sbin/reboot.

The reboot command contains a stack based buffer overflow. A local attacker in the shutdown group may exploit this overflow to execute arbitrary code with root privileges because the command is setuid root.

The following files are vulnerable :

/usr/sbin/reboot.

ID	Name	Product	Family	Severity
65392	AIX 5.3 TL 6 : bos.rte.control (U816674)	Nessus	AIX Local Security Checks	high
65366	AIX 5.2 TL 10 : bos.rte.control (U815015)	Nessus	AIX Local Security Checks	high
63757	AIX 5.3 TL 0 : reboot (IZ15480)	Nessus	AIX Local Security Checks	high
63756	AIX 5.2 TL 0 : reboot (IZ15479)	Nessus	AIX Local Security Checks	high

Detections

Analytics

CVE-2008-1601

high

Tenable Plugins

high

high

high

high