IBM AIX 4.3.3/5.1/5.2 - 'libIM' Buffer Overflow

Author: Euan Briggs
type: dos
platform: aix
port: 0
date_added: 2003-02-12
date_updated: 2012-10-25
verified: 1
codes: CVE-2003-0087;OSVDB-7996
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/6840/info

A buffer overflow vulnerability has been discovered in the libIM library available for the AIX 4.3, 5.1, 5.2 operating system. As a result it may be possible to overwrite sensitive memory in programs linked to the affected library. By identifying a linked application with the setuid bit applied, it may be possible to exploit this vulnerability to execute code with elevated privileges.

Under certain circumstances this issue may pose as a remote security threat.

/usr/lpp/X11/bin/aixterm -im `perl -e 'print "A"x47; print pack("l",0x11223344)'`