Buffer overflow in Ibm Aix

CVE-2010-3187

Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST command.

Vulnerability class: Buffer Overflow

EPSS: 0.795 (99.1th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • 1024368 (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
  • IZ83276 (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
  • oval:org.mitre.oval:def:11697 (x_refsource_OVAL, signature, Third Party Advisory, vdb-entry)
  • 14456 (Exploit, VDB Entry, Third Party Advisory, exploit, x_refsource_EXPLOIT-DB)
  • 14409 (Exploit, VDB Entry, Third Party Advisory, exploit, x_refsource_EXPLOIT-DB)
  • 66576 (x_refsource_OSVDB, vdb-entry, Broken Link)
  • IZ83274 (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
  • IZ83252 (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
  • IZ83275 (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
  • 20100723 Advanced AIX 5l FTPd Exploit (mailing-list, Exploit, x_refsource_FULLDISC, Mailing List, Third Party Advisory)