CVE-2007-4004: Buffer Overflow

Published Jul 26, 2007

Updated

Buffer overflow in the ftp client in IBM AIX 5.3 SP6 and 5.2.0 allows local users to execute arbitrary code via unspecified vectors that trigger the overflow in a gets function call. NOTE: the client is setuid root on AIX, so this issue crosses privilege boundaries.

Affected Software

2 affected components

IBM AIX=5.2.0

IBM AIX=5.3-sp6

Event History

Jul 26, 2007

CVE Published

10:30 PM

Jul 27, 2007

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-4004?

CVE-2007-4004 is classified as a critical vulnerability due to its potential to execute arbitrary code with root privileges.

How do I fix CVE-2007-4004?

To resolve CVE-2007-4004, update IBM AIX to a version that includes the patch addressing this vulnerability.

Who is affected by CVE-2007-4004?

CVE-2007-4004 affects local users of IBM AIX 5.3 SP6 and 5.2.0 systems that use the vulnerable FTP client.

What type of vulnerability is CVE-2007-4004?

CVE-2007-4004 is a buffer overflow vulnerability in the FTP client of IBM AIX.

Can CVE-2007-4004 be exploited remotely?

No, CVE-2007-4004 requires local access to the system to exploit the vulnerability.