CVE-2007-4004
Last modified
CVE-2007-4004 is a vulnerability of currently unknown severity. Buffer overflow in the ftp client in IBM AIX 5.3 SP6 and 5.2.0 allows local users to execute arbitrary code via unspecified vectors that trigger the overflow in a gets function call. NOTE: the client is setuid root on AIX, so this issue crosses privilege boundaries.. EPSS estimates a 0.85% chance of exploitation in the next 30 days.
Description
Buffer overflow in the ftp client in IBM AIX 5.3 SP6 and 5.2.0 allows local users to execute arbitrary code via unspecified vectors that trigger the overflow in a gets function call. NOTE: the client is setuid root on AIX, so this issue crosses privilege boundaries.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Ibm | Aix | 5.2.0 | — |
| Ibm | Aix | 5.3 | Sp6 |
References
- http://secunia.com/advisories/26219Vendor Advisory
- http://secunia.com/advisories/26219Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-4004?
How severe is CVE-2007-4004?
How do I fix CVE-2007-4004?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-3996Multiple integer overflows in libgd in PHP before 5.2.4 allo…
- CVE-2007-3997The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.…
- CVE-2007-3998The wordwrap function in PHP 4 before 4.4.8, and PHP 5 befor…
- CVE-2007-3999Stack-based buffer overflow in the svcauth_gss_validate func…
- CVE-2007-4000The kadm5_modify_policy_internal function in lib/kadm5/srv/s…
- CVE-2007-4003pioout in IBM AIX 5.3 SP6 allows local users to execute arbi…
- CVE-2007-4005Stack-based buffer overflow in Mike Dubman Windows RSH daemo…
- CVE-2007-4006Buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7…
- CVE-2007-4007PHP remote file inclusion vulnerability in index.php in Arti…
- CVE-2007-4008Directory traversal vulnerability in custom.php in Entertain…
- CVE-2007-4009PHP remote file inclusion vulnerability in admin/business_in…
- CVE-2007-4010The win32std extension in PHP 5.2.3 does not follow safe_mod…
Are you affected by CVE-2007-4004?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST