IBM AIX up to 4.3.2 Netstat -Zi privileges management

Summaryinfo

A vulnerability, which was classified as problematic, was found in IBM AIX 4.2/4.2.1/4.3/4.3.1/4.3.2. Affected is an unknown function of the component Netstat. Such manipulation of the argument -Zi leads to privileges management. This vulnerability is traded as CVE-2000-0873. Furthermore, there is an exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in IBM AIX 4.2/4.2.1/4.3/4.3.1/4.3.2 (Operating System). Affected by this issue is some unknown functionality of the component Netstat. The manipulation of the argument -Zi with an unknown input leads to a privileges management vulnerability. Using CWE to declare the problem leads to CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. Impacted is integrity. CVE summarizes:

netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and possibly hide evidence of unusual network activities.

The issue has been introduced in 05/17/1996. The weakness was shared 11/14/2000 by Alex (Website). The advisory is shared for download at archives.neohapsis.com. This vulnerability is handled as CVE-2000-0873. The exploitation is known to be easy. The attack needs to be approached locally. No form of authentication is required for exploitation. Technical details as well as a public exploit are known. The MITRE ATT&CK project declares the attack technique as T1068.

The exploit is available at exploit-db.com. It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 1642 days. During that time the estimated underground price was around $5k-$25k.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the databases at X-Force (5214), Exploit-DB (20213) and SecurityFocus (BID 1660†). Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Operating System

Vendor

• IBM

Name

• AIX

Version

• 4.2
• 4.2.1
• 4.3
• 4.3.1
• 4.3.2

License

• commercial

Website

• Vendor: https://www.ibm.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion