TUCoPS :: Unix :: Various Flavours
:: netstat.htm
Netstat - unprivileged users can clear netstat statistics!
Vulnerability
netstat
Affected
AIX 4.x.x
Description
Alex Medvedev found following. aix versions 4.x.x will let a
non-priveledged user clear the network interface statistics, thus
annoying system administrators and interfering with the system
scripts that depend on those numbers.
$ netstat -in --> shows stats
$ netstat -Zi --> clears them without checking the uid
Solution
The fix for this problem is still in the testing phase. When
released, customers can order the following APAR:
4.3.x APAR: IY12147