CVEvulnerability

CVE-2007-4004

6.9 MEDIUM Published 2007-07-26 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-07-26
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Buffer overflow in the ftp client in IBM AIX 5.3 SP6 and 5.2.0 allows local users to execute arbitrary code via unspecified vectors that trigger the overflow in a gets function call. NOTE: the client is setuid root on AIX, so this issue crosses privilege boundaries.

Affected configurations

• ibm aix 5.2.0 • ibm aix 5.3

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

Referenced by CWE · observed example (2)

  • CWE-1177 Use of Prohibited Code weakness
  • CWE-242 Use of Inherently Dangerous Function weakness

References