CVE-2007-4217Improper Restriction of Operations within the Bounds of a Memory Buffer in IBM AIX

Severity
7.2HIGHNVD
EPSS
0.1%
top 79.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 5
Latest updateMay 3

Description

Stack-based buffer overflow in the domacro function in ftp in IBM AIX 5.2 and 5.3 allows local users to gain privileges via a long parameter to a macro, as demonstrated by executing a macro via the '$' command.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

NVDibm/aix5.2, 5.3+1

Patches

🔴Vulnerability Details

2
GHSA
GHSA-g3xr-442j-43hf: Stack-based buffer overflow in the domacro function in ftp in IBM AIX 52022-05-03
CVEList
CVE-2007-4217: Stack-based buffer overflow in the domacro function in ftp in IBM AIX 52007-11-05

📐Framework References

2
CWE
Improper Privilege Management
CWE
Execution with Unnecessary Privileges
CVE-2007-4217 — IBM AIX vulnerability | cvebase