medium6.9Public exploit code
CVE-2007-3333
Stack-based buffer overflow in capture in IBM AIX 5.3 SP6 and 5.2.0 allows remote attackers to execute arbitrary code via a large number of terminal control se…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM AIX 5.2/5.3 - Capture Command Local Stack Buffer Overflow2007-07-26 · local · aix · Verified
- IBM AIX 5.3 SP6 - Capture Terminal Sequence Privilege Escalation2007-07-27 · local · aix · Verified
Impact
Stack-based buffer overflow in capture in IBM AIX 5.3 SP6 and 5.2.0 allows remote attackers to execute arbitrary code via a large number of terminal control sequences.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Aix | Versions 5.2.0, 5.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=570
- http://secunia.com/advisories/26219
- http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01134
- http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01135
- http://www.securityfocus.com/bid/25075
- http://www.securitytracker.com/id?1018464
- http://www.vupen.com/english/advisories/2007/2676
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35626
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=570
- http://secunia.com/advisories/26219
- http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01134
- http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01135
- http://www.securityfocus.com/bid/25075
- http://www.securitytracker.com/id?1018464
- http://www.vupen.com/english/advisories/2007/2676
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35626