CVE-2009-2727

Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary code via a long XDR-encoded ASCII string to remote procedure 15.

• CWE-119

• http://aix.software.ibm.com/aix/efixes/security/libtt_advisory.ascVendor Advisory
• http://risesecurity.org/advisories/RISE-2009001.txt
• http://secunia.com/advisories/35505Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ52842Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ52843Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ52844Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ52845Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ52846Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ52847Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ52848Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ52849Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ52850Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ52851Vendor Advisory
• http://www.securityfocus.com/bid/35419Exploit
• http://www.vupen.com/english/advisories/2009/1620Patch, Vendor Advisory
• http://aix.software.ibm.com/aix/efixes/security/libtt_advisory.ascVendor Advisory
• http://risesecurity.org/advisories/RISE-2009001.txt
• http://secunia.com/advisories/35505Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ52842Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ52843Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ52844Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ52845Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ52846Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ52847Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ52848Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ52849Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ52850Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ52851Vendor Advisory
• http://www.securityfocus.com/bid/35419Exploit
• http://www.vupen.com/english/advisories/2009/1620Patch, Vendor Advisory

Published

Aug 10, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2720Unspecified vulnerability in the javax.swing.plaf.synth.Synt…
• CVE-2009-2721Multiple unspecified vulnerabilities in the Provider class i…
• CVE-2009-2722Multiple unspecified vulnerabilities in the Provider class i…
• CVE-2009-2723Unspecified vulnerability in deserialization in the Provider…
• CVE-2009-2724Race condition in the java.lang package in Sun Java SE 5.0 b…
• CVE-2009-2726The SIP channel driver in Asterisk Open Source 1.2.x before …
• CVE-2009-2730libgnutls in GnuTLS before 2.8.2 does not properly handle a …
• CVE-2009-2732The checkHTTPpassword function in http.c in ntop 3.3.10 and …
• CVE-2009-2733Multiple cross-site scripting (XSS) vulnerabilities in Achie…
• CVE-2009-2734SQL injection vulnerability in the get_employee function in …
• CVE-2009-2735SQL injection vulnerability in admin.php in sun-jester OpenN…
• CVE-2009-2736Static code injection vulnerability in admin.php in sun-jest…