CVE-2009-3699: Buffer Overflow
First published: Thu Oct 15 2009(Updated: )
Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM AIX | =5.2.0.50 | |
| IBM AIX | =5.3.8 | |
| IBM AIX | =5.3.7 | |
| IBM AIX | =5.3.0.20 | |
| IBM AIX | =5.3_l | |
| IBM AIX | =5l | |
| IBM AIX | =6.1.3 | |
| IBM AIX | =5.3.10 | |
| IBM AIX | =5.3 | |
| IBM AIX | =5 | |
| IBM AIX | =6.1.0 | |
| IBM VIOS | <=2.1.0 | |
| IBM AIX | =5.2 | |
| IBM AIX | =6.1.1 | |
| IBM AIX | =5.2_l | |
| IBM AIX | =5.2.0.54 | |
| IBM AIX | =6.1 | |
| IBM AIX | =5.3_ml03 | |
| IBM AIX | =5.3.9 | |
| IBM VIOS | =1.5.2 | |
| IBM VIOS | =1.4 | |
| IBM AIX | =5.2.0 | |
| IBM AIX | =5.2.2 | |
| IBM VIOS | =1.5.1 | |
| IBM VIOS | =1.5.0 | |
| IBM AIX | =5.3-sp6 | |
| IBM AIX | =5.1.0.10 | |
| IBM AIX | =6.1.2 | |
| IBM AIX | =5.1l | |
| IBM AIX | =5.3.0 | |
| IBM AIX | =5.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.ibm.com/support/docview.wss?uid=isg1IZ62123
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=825
- http://www.ibm.com/support/docview.wss?uid=isg1IZ62570
- http://www.ibm.com/support/docview.wss?uid=isg1IZ62569
- http://www.ibm.com/support/docview.wss?uid=isg1IZ62571
- http://www.securityfocus.com/bid/36615
- http://www.ibm.com/support/docview.wss?uid=isg1IZ61717
- http://www.osvdb.org/58726
- http://www.vupen.com/english/advisories/2009/2846
- http://secunia.com/advisories/36978
- http://www.ibm.com/support/docview.wss?uid=isg1IZ62672
- http://aix.software.ibm.com/aix/efixes/security/cmsd_advisory.asc
- http://www.ibm.com/support/docview.wss?uid=isg1IZ61628
- http://www.ibm.com/support/docview.wss?uid=isg1IZ62237
- http://www.ibm.com/support/docview.wss?uid=isg1IZ62572
- https://www.immunityinc.com/downloads/immpartners/aixcmsd10092009.tar.gz
- http://securitytracker.com/id?1022996
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53681
- collector/nvd-historical
- collector/nvd-index
- agent/author
- agent/references
- agent/weakness
- agent/severity
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/ibm
- canonical/ibm aix
- version/ibm aix/5.2.0.50
- version/ibm aix/5.3.8
- version/ibm aix/5.3.7
- version/ibm aix/5.3.0.20
- version/ibm aix/5.3_l
- version/ibm aix/5l
- version/ibm aix/6.1.3
- version/ibm aix/5.3.10
- version/ibm aix/5.3
- version/ibm aix/5
- version/ibm aix/6.1.0
- canonical/ibm vios
- version/ibm vios/2.1.0
- version/ibm aix/5.2
- version/ibm aix/6.1.1
- version/ibm aix/5.2_l
- version/ibm aix/5.2.0.54
- version/ibm aix/6.1
- version/ibm aix/5.3_ml03
- version/ibm aix/5.3.9
- version/ibm vios/1.5.2
- version/ibm vios/1.4
- version/ibm aix/5.2.0
- version/ibm aix/5.2.2
- version/ibm vios/1.5.1
- version/ibm vios/1.5.0
- version/ibm aix/5.3-sp6
- version/ibm aix/5.1.0.10
- version/ibm aix/6.1.2
- version/ibm aix/5.1l
- version/ibm aix/5.3.0
- version/ibm aix/5.1