NVD

Id
56136  
Name
CVE-2007-4004  
Description
Buffer overflow in the ftp client in IBM AIX 5.3 SP6 and 5.2.0 allows local users to execute arbitrary code via unspecified vectors that trigger the overflow in a gets function call. NOTE: the client is setuid root on AIX, so this issue crosses privilege boundaries.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-07-26  
Modified Date
2011-03-07  
Seq
2007-4004  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
285955 56136 CVE-2007-4004 ftp://aix.software.ibm.com/aix/efixes/security/README  View
285956 56136 CVE-2007-4004 20070726 IBM AIX ftp gets() Multiple Buffer Overflow Vulnerabilities  View
285957 56136 CVE-2007-4004 IZ01812  View
285958 56136 CVE-2007-4004 IZ01813  View
285959 56136 CVE-2007-4004 25077  View
285960 56136 CVE-2007-4004 1018465  View
285961 56136 CVE-2007-4004 ADV-2007-2675  View
285962 56136 CVE-2007-4004 aix-ftp-bo(35627)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51900 JVNDB-2007-000563 IBM AIX の ftp クライアントにおけるバッファオーバーフローの脆弱性 IBM AIX の ftp クライアントには、gets() 関数を呼び出す際に、バッファオーバーフローの脆弱性が存在します。 CVE-2007-4004 27359 CVE-2007-4004 56136 6.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000563.html 2007-07-06 2007-08-08 View