Description
Buffer overflow in (1) grpck and (2) pwck, if installed setuid on a system as recommended in some AIX documentation, may allow local users to gain privileges via a long command line argument.
References
- VU#877811 third-party-advisory
- VU#121891 third-party-advisory
- grpck-command-line-bo(7857) vdb-entry
- 20020102 blackshell3: multiple pwck/grpck vulnerabilities mailing-list
- pwck-command-line-bo(7859) vdb-entry
- http://publib.boulder.ibm.com/infocenter/pseries/topic/com.ibm.aix.doc/cmds/aixcmds2/grpck.htm
- 20020102 Re: [VulnWatch] blackshell3: multiple pwck/grpck vulnerabilities mailing-list