Lucene search

MitreCVE-2007-4004

HistoryJul 26, 2007 - 10:30 p.m.

CVE-2007-4004

2007-07-2622:30:00

CWE-119

mitre

web.nvd.nist.gov

cve-2007-4004

buffer overflow

ibm aix

ftp client

local exploit

arbitrary code execution

privilege boundary

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

Percentile

9.5%

JSON

Buffer overflow in the ftp client in IBM AIX 5.3 SP6 and 5.2.0 allows local users to execute arbitrary code via unspecified vectors that trigger the overflow in a gets function call. NOTE: the client is setuid root on AIX, so this issue crosses privilege boundaries.

Affected configurations

Nvd

Node

ibmaixMatch5.2.0

ibmaixMatch5.3sp6

VendorProductVersionCPE
ibmaix5.2.0cpe:2.3:o:ibm:aix:5.2.0:*:*:*:*:*:*:*
ibmaix5.3cpe:2.3:o:ibm:aix:5.3:sp6:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	aix	5.2.0	cpe:2.3:o:ibm:aix:5.2.0:::::::*
ibm	aix	5.3	cpe:2.3:o:ibm:aix:5.3:sp6::::::

References

ftp://aix.software.ibm.com/aix/efixes/security/README

labs.idefense.com/intelligence/vulnerabilities/display.php?id=571

secunia.com/advisories/26219

www-1.ibm.com/support/docview.wss?uid=isg1IZ01812

www-1.ibm.com/support/docview.wss?uid=isg1IZ01813

www.securityfocus.com/bid/25077

www.securitytracker.com/id?1018465

www.vupen.com/english/advisories/2007/2675

exchange.xforce.ibmcloud.com/vulnerabilities/35627

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

Percentile

9.5%

JSON

Related for CVE-2007-4004