cvelist/2009/2xxx/CVE-2009-2727.json
2019-03-18 01:56:40 +00:00

132 lines
4.5 KiB
JSON

{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-2727",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary code via a long XDR-encoded ASCII string to remote procedure 15."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "IZ52843",
"refsource": "AIXAPAR",
"url": "http://www.ibm.com/support/docview.wss?uid=isg1IZ52843"
},
{
"name": "35505",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/35505"
},
{
"name": "http://aix.software.ibm.com/aix/efixes/security/libtt_advisory.asc",
"refsource": "CONFIRM",
"url": "http://aix.software.ibm.com/aix/efixes/security/libtt_advisory.asc"
},
{
"name": "ADV-2009-1620",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2009/1620"
},
{
"name": "IZ52848",
"refsource": "AIXAPAR",
"url": "http://www.ibm.com/support/docview.wss?uid=isg1IZ52848"
},
{
"name": "IZ52844",
"refsource": "AIXAPAR",
"url": "http://www.ibm.com/support/docview.wss?uid=isg1IZ52844"
},
{
"name": "http://risesecurity.org/advisories/RISE-2009001.txt",
"refsource": "MISC",
"url": "http://risesecurity.org/advisories/RISE-2009001.txt"
},
{
"name": "IZ52850",
"refsource": "AIXAPAR",
"url": "http://www.ibm.com/support/docview.wss?uid=isg1IZ52850"
},
{
"name": "IZ52847",
"refsource": "AIXAPAR",
"url": "http://www.ibm.com/support/docview.wss?uid=isg1IZ52847"
},
{
"name": "IZ52849",
"refsource": "AIXAPAR",
"url": "http://www.ibm.com/support/docview.wss?uid=isg1IZ52849"
},
{
"name": "35419",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/35419"
},
{
"name": "IZ52851",
"refsource": "AIXAPAR",
"url": "http://www.ibm.com/support/docview.wss?uid=isg1IZ52851"
},
{
"name": "IZ52842",
"refsource": "AIXAPAR",
"url": "http://www.ibm.com/support/docview.wss?uid=isg1IZ52842"
},
{
"name": "IZ52846",
"refsource": "AIXAPAR",
"url": "http://www.ibm.com/support/docview.wss?uid=isg1IZ52846"
},
{
"name": "IZ52845",
"refsource": "AIXAPAR",
"url": "http://www.ibm.com/support/docview.wss?uid=isg1IZ52845"
}
]
}
}