CVE-2009-1355 - Stack-based buffer overflow in muxatmd in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via a long filename

Back Back to CVE browser

HIGH

Stack-based buffer overflow in muxatmd in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via a long filename

Published Apr 21, 2009

7.2

HIGH

CVSS 2.0

EPSS 0.41%

Description

Stack-based buffer overflow in muxatmd in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via a long filename.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (16)

http://aix.software.ibm.com/aix/efixes/security/muxatmd_advisory.asc
x_refsource_CONFIRMVendor Advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=784
third-party-advisoryx_refsource_IDEFENSE
http://secunia.com/advisories/34662
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IZ48495
vendor-advisoryx_refsource_AIXAPAR
http://www.ibm.com/support/docview.wss?uid=isg1IZ48496
vendor-advisoryx_refsource_AIXAPARVendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IZ48499
vendor-advisoryx_refsource_AIXAPARVendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IZ48500
vendor-advisoryx_refsource_AIXAPAR
http://www.ibm.com/support/docview.wss?uid=isg1IZ48501
vendor-advisoryx_refsource_AIXAPAR
http://www.ibm.com/support/docview.wss?uid=isg1IZ48502
vendor-advisoryx_refsource_AIXAPARVendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IZ48561
vendor-advisoryx_refsource_AIXAPAR
http://www.ibm.com/support/docview.wss?uid=isg1IZ48562
vendor-advisoryx_refsource_AIXAPARVendor Advisory
http://www.securityfocus.com/bid/34543
vdb-entryx_refsource_BIDPatch
http://www.securitytracker.com/id?1022065
vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2009/1056
vdb-entryx_refsource_VUPENPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1353
Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6402
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://aix.software.ibm.com/aix/efixes/security/muxatmd_advisory.asc		x_refsource_CONFIRMVendor Advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=784		third-party-advisoryx_refsource_IDEFENSE
http://secunia.com/advisories/34662		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IZ48495		vendor-advisoryx_refsource_AIXAPAR
http://www.ibm.com/support/docview.wss?uid=isg1IZ48496		vendor-advisoryx_refsource_AIXAPARVendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IZ48499		vendor-advisoryx_refsource_AIXAPARVendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IZ48500		vendor-advisoryx_refsource_AIXAPAR
http://www.ibm.com/support/docview.wss?uid=isg1IZ48501		vendor-advisoryx_refsource_AIXAPAR
http://www.ibm.com/support/docview.wss?uid=isg1IZ48502		vendor-advisoryx_refsource_AIXAPARVendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IZ48561		vendor-advisoryx_refsource_AIXAPAR
http://www.ibm.com/support/docview.wss?uid=isg1IZ48562		vendor-advisoryx_refsource_AIXAPARVendor Advisory
http://www.securityfocus.com/bid/34543		vdb-entryx_refsource_BIDPatch
http://www.securitytracker.com/id?1022065		vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2009/1056		vdb-entryx_refsource_VUPENPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1353		Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6402		vdb-entrysignaturex_refsource_OVAL