Buffer overflow in qoslist in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors.

There is a buffer overflow vulnerability in the qoslist command. A locally authenticated attacker can exploit this vulnerability if they have they have been assigned the aix.network.status or aix.network.config.no role-based access control authorizations.

The successful exploitation of this vulnerability allows a local attacker to execute arbitrary code with the innate privileges of the qoslist command.

The following executable is vulnerable :

/usr/sbin/qoslist.

ID	Name	Product	Family	Severity
64359	AIX 6.1 TL 1 : qoslist (IZ71869)	Nessus	AIX Local Security Checks	high
64357	AIX 6.1 TL 2 : qoslist (IZ71590)	Nessus	AIX Local Security Checks	high
64355	AIX 6.1 TL 3 : qoslist (IZ71554)	Nessus	AIX Local Security Checks	high
64353	AIX 6.1 TL 4 : qoslist (IZ68194)	Nessus	AIX Local Security Checks	high

Detections

Analytics

CVE-2010-0961

high

Tenable Plugins

high

high

high

high