Lucene search

MitreCVE-2009-3699

HistoryOct 15, 2009 - 10:30 a.m.

CVE-2009-3699

2009-10-1510:30:01

CWE-119

mitre

web.nvd.nist.gov

ibm

aix

vios

buffer overflow

remote code execution

cve-2009-3699

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.79

Percentile

98.3%

JSON

Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd.

Affected configurations

Nvd

Node

ibmviosRange≤2.1.0

ibmviosMatch1.4

ibmviosMatch1.5.0

ibmviosMatch1.5.1

ibmviosMatch1.5.2

ibmaixMatch5

ibmaixMatch5.1

ibmaixMatch5.1.0.10

ibmaixMatch5.1l

ibmaixMatch5.2

ibmaixMatch5.2.0

ibmaixMatch5.2.0.50

ibmaixMatch5.2.0.54

ibmaixMatch5.2.2

ibmaixMatch5.2_l

ibmaixMatch5.3

ibmaixMatch5.3sp6

ibmaixMatch5.3.0

ibmaixMatch5.3.0.20

ibmaixMatch5.3.7

ibmaixMatch5.3.8

ibmaixMatch5.3.9

ibmaixMatch5.3.10

ibmaixMatch5.3_l

ibmaixMatch5.3_ml03

ibmaixMatch5l

ibmaixMatch6.1

ibmaixMatch6.1.0

ibmaixMatch6.1.1

ibmaixMatch6.1.2

ibmaixMatch6.1.3

VendorProductVersionCPE
ibmvios*cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*
ibmvios1.4cpe:2.3:a:ibm:vios:1.4:*:*:*:*:*:*:*
ibmvios1.5.0cpe:2.3:a:ibm:vios:1.5.0:*:*:*:*:*:*:*
ibmvios1.5.1cpe:2.3:a:ibm:vios:1.5.1:*:*:*:*:*:*:*
ibmvios1.5.2cpe:2.3:a:ibm:vios:1.5.2:*:*:*:*:*:*:*
ibmaix5cpe:2.3:o:ibm:aix:5:*:*:*:*:*:*:*
ibmaix5.1cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*
ibmaix5.1.0.10cpe:2.3:o:ibm:aix:5.1.0.10:*:*:*:*:*:*:*
ibmaix5.1lcpe:2.3:o:ibm:aix:5.1l:*:*:*:*:*:*:*
ibmaix5.2cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	vios	*	cpe:2.3:a:ibm:vios::::::::
ibm	vios	1.4	cpe:2.3:a:ibm:vios:1.4:::::::*
ibm	vios	1.5.0	cpe:2.3:a:ibm:vios:1.5.0:::::::*
ibm	vios	1.5.1	cpe:2.3:a:ibm:vios:1.5.1:::::::*
ibm	vios	1.5.2	cpe:2.3:a:ibm:vios:1.5.2:::::::*
ibm	aix	5	cpe:2.3:o:ibm:aix:5:::::::*
ibm	aix	5.1	cpe:2.3:o:ibm:aix:5.1:::::::*
ibm	aix	5.1.0.10	cpe:2.3:o:ibm:aix:5.1.0.10:::::::*
ibm	aix	5.1l	cpe:2.3:o:ibm:aix:5.1l:::::::*
ibm	aix	5.2	cpe:2.3:o:ibm:aix:5.2:::::::*

Rows per page:

1-10 of 311

References

aix.software.ibm.com/aix/efixes/security/cmsd_advisory.asc

labs.idefense.com/intelligence/vulnerabilities/display.php?id=825

secunia.com/advisories/36978

securitytracker.com/id?1022996

www.ibm.com/support/docview.wss?uid=isg1IZ61628

www.ibm.com/support/docview.wss?uid=isg1IZ61717

www.ibm.com/support/docview.wss?uid=isg1IZ62123

www.ibm.com/support/docview.wss?uid=isg1IZ62237

www.ibm.com/support/docview.wss?uid=isg1IZ62569

www.ibm.com/support/docview.wss?uid=isg1IZ62570

www.ibm.com/support/docview.wss?uid=isg1IZ62571

www.ibm.com/support/docview.wss?uid=isg1IZ62572

www.ibm.com/support/docview.wss?uid=isg1IZ62672

www.osvdb.org/58726

www.securityfocus.com/bid/36615

www.vupen.com/english/advisories/2009/2846

exchange.xforce.ibmcloud.com/vulnerabilities/53681

www.immunityinc.com/downloads/immpartners/aixcmsd10092009.tar.gz

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.79

Percentile

98.3%

JSON

Related for CVE-2009-3699