CVE-2007-4621

Related Files

iDEFENSE Security Advisory 2007-10-30.2

Posted Oct 31, 2007

Authored by iDefense Labs | Site idefense.com

iDefense Security Advisory 10.30.07 - Local exploitation of a buffer overflow vulnerability in the crontab program of IBM Corp.'s AIX 5.2 operating system allows attackers to execute arbitrary code with root privileges. The problem specifically exists within the main function. While processing command line arguments, the crontab program will copy a user-supplied argument to a fixed size BSS (data segment) buffer. Since no bounds checking is performed, it's possible to overwrite a large portion of the data stored in the BSS memory area. iDefense has confirmed the existence of this vulnerability within AIX version 5.2. Previous versions are suspected to be vulnerable. AIX 5.3 does not appear to be vulnerable.

tags | advisory, overflow, arbitrary, local, root

systems | aix

advisories | CVE-2007-4621

SHA-256 | bf2bf7ab5d98550fc89a5faddb98bd4109429208cc010b3c2097a31ab31c0e91

Download | Favorite | View