Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2002-1468 — Improper Restriction of Operations within the Bounds of a Memory Buffer in IBM AIX

4 documents4 sources
Severity
10.0CRITICALNVD
EPSS
10.7%
top 6.67%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
IBM AIX
Timeline
PublishedApr 22
Latest updateApr 30

Description

Buffer overflow in errpt in AIX 4.3.3 allows local users to execute arbitrary code as root.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

▶NVDibm/aix4.3.3

🔴Vulnerability Details

2
GHSA
GHSA-gmx5-v3h7-5j49: Buffer overflow in errpt in AIX 4↗2022-04-30
▶
CVEList
CVE-2002-1468: Buffer overflow in errpt in AIX 4↗2004-09-01
▶

💥Exploits & PoCs

1
Exploit-DB
IBM AIX 4.3.x/5.1 - 'ERRPT' Local Buffer Overflow↗2003-04-16
▶
CVE-2002-1468 — IBM AIX vulnerability | cvebase