CVE-2009-2727

Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary code via a long XDR-encoded ASCII string to remote procedure 15.

Affected products

Aix

Ibm Aix

= 5.2, 5.2.0, 5.2.0.50, 5.2.0.54, 5.2.2, 5.2_l, 5.3, 5.3.0, 5.3.7, 5.3.8, 5.3.9, 5.3.10, 6.1, 6.1.0, 6.1.1, 6.1.2

CVSS 2.0

9.3 HIGH

EPSS

26.7% (98th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2009-08-10