The getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not properly interact with customer-extended LDAP user filtering, which allows local users to gain privileges via unspecified vectors.

The remote host is missing AIX PTF U852829, which is related to the security of the package bos.rte.security.

AIX could allow a local attacker to gain elevated privileges on the system, caused by an error in the getpwnam() function when customer extended LDAP user filtering is configured. A local attacker could exploit this vulnerability to gain lateral or elevated privileges on the system.

The remote host is missing AIX PTF U849827, which is related to the security of the package bos.rte.security.

AIX could allow a local attacker to gain elevated privileges on the system, caused by an error in the getpwnam() function when customer extended LDAP user filtering is configured. A local attacker could exploit this vulnerability to gain lateral or elevated privileges on the system.

The remote host is missing AIX PTF U838721, which is related to the security of the package bos.rte.security.

AIX could allow a local attacker to gain elevated privileges on the system, caused by an error in the getpwnam() function when customer extended LDAP user filtering is configured. A local attacker could exploit this vulnerability to gain lateral or elevated privileges on the system.

AIX could allow a local attacker to gain elevated privileges on the system, caused by an error in the getpwnam() function when customer extended LDAP user filtering is configured. A local attacker could exploit this vulnerability to gain lateral or elevated privileges on the system.

ID	Name	Product	Family	Severity
65528	AIX 7.1 : bos.rte.security (U852829)	Nessus	AIX Local Security Checks	high
65520	AIX 6.1 TL 5 : bos.rte.security (U849827)	Nessus	AIX Local Security Checks	high
65473	AIX 6.1 TL 7 : bos.rte.security (U838721)	Nessus	AIX Local Security Checks	high
63715	AIX 7.1 TL 0 : ldapauth (IV19098)	Nessus	AIX Local Security Checks	high
63714	AIX 6.1 TL 5 : ldapauth (IV19097)	Nessus	AIX Local Security Checks	high
63713	AIX 6.1 TL 6 : ldapauth (IV19077)	Nessus	AIX Local Security Checks	high
63712	AIX 5.3 TL 12 : ldapauth (IV18638)	Nessus	AIX Local Security Checks	high
63711	AIX 6.1 TL 7 : ldapauth (IV18637)	Nessus	AIX Local Security Checks	high
63710	AIX 7.1 TL 1 : ldapauth (IV18464)	Nessus	AIX Local Security Checks	high

Detections

Analytics

CVE-2012-0745

high

Tenable Plugins

high

high

high

high

high

high

high

high

high