CVE-2007-4004 EXPLOIT
6.9
MEDIUM · CVSS 2.0 · EPSS 0.9% (pctl 57)
Patch early
A public exploit exists.
Description
Buffer overflow in the ftp client in IBM AIX 5.3 SP6 and 5.2.0 allows local users to execute arbitrary code via unspecified vectors that trigger the overflow in a gets function call. NOTE: the client is setuid root on AIX, so this issue crosses privilege boundaries.
Scoring
| CVSS | 6.9 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:L/AC:M/Au:N/C:C/I:C/A:C |
| EPSS | 0.85% — more likely to be exploited than 57% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2007-07-26 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| ibm | aix |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | IBM AIX 5.3 SP6 - FTP 'gets()' Local Privilege Escalation | 2007-07-27 |
References
- ftp://aix.software.ibm.com/aix/efixes/security/README
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=571
- http://secunia.com/advisories/26219
- http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01812
- http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01813
- http://www.securityfocus.com/bid/25077
- http://www.securitytracker.com/id?1018465
- http://www.vupen.com/english/advisories/2007/2675
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35627
- ftp://aix.software.ibm.com/aix/efixes/security/README
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=571
- http://secunia.com/advisories/26219
- http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01812
- http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01813
- http://www.securityfocus.com/bid/25077
- http://www.securitytracker.com/id?1018465
- http://www.vupen.com/english/advisories/2007/2675
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35627
→ the Explorer · watch your stack · NVD