Buffer overflow in qosmod in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors.

There is a buffer overflow vulnerability in the qosmod command. A locally authenticated attacker can exploit this vulnerability if they have they have been assigned the aix.network.config.no role-based access control authorization.

The successful exploitation of this vulnerability allows a local attacker to execute arbitrary code with the innate privileges of the qosmod command.

The following executable is vulnerable :

/usr/sbin/qosmod.

ID	Name	Product	Family	Severity
64360	AIX 6.1 TL 1 : qosmod (IZ71870)	Nessus	AIX Local Security Checks	high
64358	AIX 6.1 TL 2 : qosmod (IZ71627)	Nessus	AIX Local Security Checks	high
64356	AIX 6.1 TL 3 : qosmod (IZ71555)	Nessus	AIX Local Security Checks	high
64354	AIX 6.1 TL 4 : qosmod (IZ68231)	Nessus	AIX Local Security Checks	high

Detections

Analytics

CVE-2010-0960

high

Tenable Plugins

high

high

high

high