CVE-2009-3699

Stack-based buffer overflow in libcsa.a aka the calendar daemon library in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd...

Stack overflow

Stack-based buffer overflow in libcsa.a aka the calendar daemon library in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd...

Immunity Canvas: AIXCMSD

Name| aixcmsd ---|--- CVE| CVE-2009-3699 Exploit Pack| CANVAS Description| rpc.cmsd remote root exploit AIX Notes| CVE Name: CVE-2009-3699 Versions Affected: AIX 5.x / AIX 6.x Notes: Repeatability: Unlimited OSVBD: 58726 References:...

CVE-2009-3699

CVE-2009-3699 – AIX rpc.cmsd opcode 21 buffer overflow AIX libcsa.a (calendar daemon library) is vulnerable to a stack-based buffer overflow when handling opcode 21 parameters in rpc.cmsd. Affected products include IBM AIX 5.x up to 5.3.10 and 6.x up to 6.1.3, and VIOS 2.1 and earlier. The flaw a...

CVE-2009-3699

Stack-based buffer overflow in libcsa.a aka the calendar daemon library in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd...

IBM AIX 'rpc.cmsd'日历守护进程远程栈缓冲区溢出漏洞

Bugraq ID: 36615 IBM AIX是一款商业性质的操作系统。 IBM AIX rpc.cmsd存在缓冲区溢出问题，远程攻击者可以利用漏洞以root进程权限执行任意指令。 处理远程过程21的请求时存在漏洞，此函数接收两个参数，都为XDR字符串，当拷贝第一个参数到基于栈的缓冲区时，代码没有正确校验它的长度，可触发基于栈的缓冲区溢出。要利用此漏洞，攻击者需要通过RCP连接目标主机，不需要验证通过。 IBM Virtual I/O Server VIOS 2.1 IBM Virtual I/O Server VIOS 1.5.2 IBM Virtual I/O Server VIO...

iDefense Security Advisory 10.07.09: IBM AIX rpc.cmsd Stack Buffer Overflow Vulnerability

iDefense Security Advisory 10.07.09 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 07, 2009 I. BACKGROUND IBM's AIX is a Unix operating system based on System V, which runs on the PowerPC PPC architecture. For more information, visit the product web site at the following URL...

AIX Calendar Manager Service Daemon (rpc.cmsd) Opcode 21 Buffer Overflow

This module exploits a buffer overflow vulnerability in opcode 21 handled by rpc.cmsd on AIX. By making a request with a long string passed to the first argument of the "rtablecreate" RPC, a stack based buffer overflow occurs. This leads to arbitrary code execution. NOTE: Unsuccessful attempts ma...

Design/Logic Flaw

gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors...

CVE-2009-3517

nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfsportmon setting, which allows remote attackers to bypass intended access restrictions for NFSv4 shares via unspecified vectors...

Design/Logic Flaw

nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfsportmon setting, which allows remote attackers to bypass intended access restrictions for NFSv4 shares via unspecified vectors...

CVE-2009-3516

gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors...

CVE-2009-3516

gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors...

CVE-2009-3516

CVE-2009-3516 affects IBM AIX: gssd in AIX 5.3.x (up to 5.3.9) and 6.1.x (up to 6.1.2) does not properly handle the NFSv4 Kerberos credential cache, enabling local users to bypass access restrictions on Kerberized NFSv4 shares via unspecified vectors. Impact per CVSS v2 is High (local, no auth, f...

CVE-2009-3517

CVE-2009-3517 concerns IBM AIX NFS client/server handling where nfs.ext on AIX 5.3.x (5.3.0–5.3.9) and 6.1.x (6.1.0–6.1.2) does not properly enforce nfs_portmon, allowing remote attackers to bypass access restrictions on NFSv4 shares via unspecified vectors. The root cause is improper use of the ...

CVE-2009-3517

nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfsportmon setting, which allows remote attackers to bypass intended access restrictions for NFSv4 shares via unspecified vectors...

AIX 610000 : U828612

The remote host is missing AIX PTF U828612 which is related to the security of the package bos.sysmgt.nim.spot You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610001 : U828548

The remote host is missing AIX PTF U828548 which is related to the security of the package devices.common.IBM.usb.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

AIX 610001 : U828545

The remote host is missing AIX PTF U828545 which is related to the security of the package bos.diag.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610001 : U828499

The remote host is missing AIX PTF U828499 which is related to the security of the package devices.chrp.IBM.lhea.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc...