CVE-2003-0087 - Buffer overflow in libIM library (libIM.a) for National Language Support (NLS) on AIX 4.3 through 5.

CVE-2003-0087

Summary

Buffer overflow in libIM library (libIM.a) for National Language Support (NLS) on AIX 4.3 through 5.2 allows local users to gain privileges via several possible attack vectors, including a long -im argument to aixterm.

References

Vulnerable Configurations

cpe:2.3:a:national_language_support:libim:*:*:*:*:*:*:*:*
cpe:2.3:a:national_language_support:libim:*:*:*:*:*:*:*:*

CVSS

Base:	7.2 (as of 10-10-2017 - 01:30)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:C/I:C/A:C

refmap via4

aixapar	IY40307 IY40317 IY40320
bid	6840
bugtraq	20030212 iDEFENSE Security Advisory 02.12.03: Buffer Overflow in AIX libIM.a 20030212 libIM.a buffer overflow vulnerability
misc	http://www.idefense.com/advisory/02.12.03.txt
osvdb	7996
vulnwatch	20030212 iDEFENSE Security Advisory 02.12.03: Buffer Overflow in AIX libIM.a
xf	aix-aixterm-libim-bo(11309)

Last major update

10-10-2017 - 01:30

Published

03-03-2003 - 05:00

Last modified

10-10-2017 - 01:30