Description
Stack-based buffer overflow in the domacro function in ftp in IBM AIX 5.2 and 5.3 allows local users to gain privileges via a long parameter to a macro, as demonstrated by executing a macro via the '$' command.
References
- 27437 third-party-advisory
- aix-ftp-domacro-bo(38162) vdb-entry
- 20071030 IBM AIX ftp domacro Parameter Buffer Overflow Vulnerability third-party-advisory
- http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200709%2FSECURITY%2F20070905%2Fdatafile101815
- 1018871 vdb-entry
- IZ05488 vendor-advisory
- ADV-2007-3669 vdb-entry
- IZ05487 vendor-advisory
- 26260 vdb-entry