CVE-2009-3699

Published Oct 15, 2009 CVSS 2.0 · 10.0 Critical EPSS 62.3% KEV · Not listed
Description
Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 6:38 AM
Reserved
Oct 14, 2009, 12:00 AM
Status
Modified
Published
Oct 15, 2009, 10:30 AM
Modified
Jun 16, 2026, 11:12 PM