high7.2Public exploit code
CVE-2003-0087
Buffer overflow in libIM library (libIM.a) for National Language Support (NLS) on AIX 4.3 through 5.2 allows local users to gain privileges via several possibl…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM AIX 4.3.3/5.1/5.2 - 'libIM' Buffer Overflow2003-02-12 · dos · aix · Verified
Impact
Buffer overflow in libIM library (libIM.a) for National Language Support (NLS) on AIX 4.3 through 5.2 allows local users to gain privileges via several possible attack vectors, including a long -im argument to aixterm.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| National Language Support | Libim | All versions |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0066.html
- http://marc.info/?l=bugtraq&m=104508375107938&w=2
- http://marc.info/?l=bugtraq&m=104508833214691&w=2
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY40307&apar=only
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY40317&apar=only
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY40320&apar=only
- http://www.idefense.com/advisory/02.12.03.txt
- http://www.osvdb.org/7996
- http://www.securityfocus.com/bid/6840
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11309
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0066.html
- http://marc.info/?l=bugtraq&m=104508375107938&w=2
- http://marc.info/?l=bugtraq&m=104508833214691&w=2
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY40307&apar=only
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY40317&apar=only
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY40320&apar=only
- http://www.idefense.com/advisory/02.12.03.txt
- http://www.osvdb.org/7996
- http://www.securityfocus.com/bid/6840
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11309