iDefense Security Advisory 07.26.07: IBM AIX capture Terminal Control Sequence Buffer Overflow Vulnerability

IBM AIX capture Terminal Control Sequence Buffer Overflow Vulnerability iDefense Security Advisory 07.26.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 26, 2007 I. BACKGROUND The capture program is a setuid root application, installed by default under multiple versions of IBM AIX,...

CVE-2007-3333

CVE-2007-3333 : A stack-based buffer overflow in IBM AIX’s capture utility (affecting AIX 5.3 SP6 and 5.2.0) allows remote attackers to execute arbitrary code by sending a large sequence of terminal control codes. The advisory indicates the vulnerability resides in the code that parses terminal c...