high7.2Public exploit code
CVE-2004-2312
Buffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain privileges via a long CC argument.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GNU Make For IBM AIX 4.3.3 - CC Path Local Buffer Overflow2003-05-30 · local · aix · Verified
Impact
Buffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain privileges via a long CC argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Aix | Version 4.3.3 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2004-03/0997.html
- http://archives.neohapsis.com/archives/fulldisclosure/2004-03/1124.html
- http://secunia.com/advisories/11158/
- http://www.osvdb.org/4391
- http://www.securityfocus.com/bid/9903
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15554
- http://archives.neohapsis.com/archives/fulldisclosure/2004-03/0997.html
- http://archives.neohapsis.com/archives/fulldisclosure/2004-03/1124.html
- http://secunia.com/advisories/11158/
- http://www.osvdb.org/4391
- http://www.securityfocus.com/bid/9903
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15554