CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-2727

Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary code via a long XDR-encoded ASCII string to remote procedure 15.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.776

EPSS Ranking 99.0%

CVSS Severity

CVSS v2 Score 9.3

References

Products affected by CVE-2009-2727

Ibm » Aix » Version: 5.2

cpe:2.3:o:ibm:aix:5.2
Ibm » Aix » Version: 5.2.0

cpe:2.3:o:ibm:aix:5.2.0
Ibm » Aix » Version: 5.2.0.50

cpe:2.3:o:ibm:aix:5.2.0.50
Ibm » Aix » Version: 5.2.0.54

cpe:2.3:o:ibm:aix:5.2.0.54
Ibm » Aix » Version: 5.2.2

cpe:2.3:o:ibm:aix:5.2.2
Ibm » Aix » Version: 5.2_l

cpe:2.3:o:ibm:aix:5.2_l
Ibm » Aix » Version: 5.3

cpe:2.3:o:ibm:aix:5.3
Ibm » Aix » Version: 5.3.0

cpe:2.3:o:ibm:aix:5.3.0
Ibm » Aix » Version: 5.3.10

cpe:2.3:o:ibm:aix:5.3.10
Ibm » Aix » Version: 5.3.7

cpe:2.3:o:ibm:aix:5.3.7
Ibm » Aix » Version: 5.3.8

cpe:2.3:o:ibm:aix:5.3.8
Ibm » Aix » Version: 5.3.9

cpe:2.3:o:ibm:aix:5.3.9
Ibm » Aix » Version: 6.1

cpe:2.3:o:ibm:aix:6.1
Ibm » Aix » Version: 6.1.0

cpe:2.3:o:ibm:aix:6.1.0
Ibm » Aix » Version: 6.1.1

cpe:2.3:o:ibm:aix:6.1.1
Ibm » Aix » Version: 6.1.2

cpe:2.3:o:ibm:aix:6.1.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-2727

Products

Pricing

Contact Us