CVE-2007-3333

Related Files

iDEFENSE Security Advisory 2007-07-26.2

Posted Jul 28, 2007

Authored by iDefense Labs | Site idefense.com

iDefense Security Advisory 07.26.07 - Local exploitation of a stack-based buffer overflow vulnerability in the 'capture' program, as included with IBM Corp.'s AIX operating system, allows an attacker to execute arbitrary code with root privileges. The vulnerability exists within the code that parses terminal control sequences. A long series of control sequences will trigger an exploitable stack-based buffer overflow. iDefense has confirmed the existence of this vulnerability in AIX version 5.3 with service pack 6. Previous versions may also be affected.

tags | advisory, overflow, arbitrary, local, root

systems | aix

advisories | CVE-2007-3333

SHA-256 | 908a645d01d8e4edec8e221b469bcc9e5ff3c39e86322bbb73f81a6763bd38fc

Download | Favorite | View