IBM AIX 4.3.3/5.1/5.2 - 'libIM' Buffer Overflow

Author: Euan Briggs
type: dos
platform: aix
port: nan
date_added: 2003-02-12 
date_updated: 2012-10-25 
verified: 1 
codes: CVE-2003-0087;OSVDB-7996 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/6840/info

A buffer overflow vulnerability has been discovered in the libIM library available for the AIX 4.3, 5.1, 5.2 operating system. As a result it may be possible to overwrite sensitive memory in programs linked to the affected library. By identifying a linked application with the setuid bit applied, it may be possible to exploit this vulnerability to execute code with elevated privileges.

Under certain circumstances this issue may pose as a remote security threat.

/usr/lpp/X11/bin/aixterm -im `perl -e 'print "A"x47; print pack("l",0x11223344)'`