CVE-2007-4353

Published: Aug 15, 2007Modified: Apr 23, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain root privileges via unspecified vectors involving the (1) chpath, (2) rmpath, and (3) devinstall programs in bos.rte.methods.

Affected (2)

Products: Ibm: Aix

Ibm

1 product

Aix

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	Version 5.2
Ibm Aix	Version 5.3

References (16)

ftp://aix.software.ibm.com/aix/efixes/security/README (unsafe URL)

Source: cve@mitre.org

Patch

http://secunia.com/advisories/26420

Source: cve@mitre.org

PatchVendor Advisory

http://www-1.ibm.com/support/docview.wss?uid=isg1IZ00531

Source: cve@mitre.org

http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01433

Source: cve@mitre.org

http://www.securityfocus.com/bid/25270

Source: cve@mitre.org

http://www.securitytracker.com/id?1018549

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/2860

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35971

Source: cve@mitre.org

ftp://aix.software.ibm.com/aix/efixes/security/README (unsafe URL)