CVE-2008-1594 Information

Description

The kernel in IBM AIX 5.2 and 5.3 does not properly handle resizing JFS2 filesystems on concurrent volume groups spread across multiple nodes which allows local users of one node to cause a denial of service (remote node crash) by using chfs or lreducelv to reduce a filesystem’s size.

Reference

http://securitytracker.com/id?1019606 http://www.ibm.com/support/docview.wss?uid=isg1IZ04946 http://www.ibm.com/support/docview.wss?uid=isg1IZ04953 http://www.ibm.com/support/docview.wss?uid=isg1IZ05246 http://www.securityfocus.com/bid/28467 http://www.vupen.com/english/advisories/2008/0865 http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153 http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4154 http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A5434