Evil-DB LogoEvil-DB
← All CVEs

CVE-2009-3699

high · 10

Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd.

10
CVSS
62.3%
EPSS (exploit prob.)
99th
EPSS percentile
2009-10-15
Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

VendorProductAffected versions
ibmvios<= 2.1.0
ibmvios1.4
ibmvios1.5.0
ibmvios1.5.1
ibmvios1.5.2
ibmaix5
ibmaix5.1
ibmaix5.1.0.10
ibmaix5.1l
ibmaix5.2
ibmaix5.2.0
ibmaix5.2.0.50
ibmaix5.2.0.54
ibmaix5.2.2
ibmaix5.2_l
ibmaix5.3
ibmaix5.3
ibmaix5.3.0
ibmaix5.3.0.20
ibmaix5.3.7
ibmaix5.3.8
ibmaix5.3.9
ibmaix5.3.10
ibmaix5.3_l
ibmaix5.3_ml03
ibmaix5l
ibmaix6.1
ibmaix6.1.0
ibmaix6.1.1
ibmaix6.1.2
ibmaix6.1.3

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-3699