CVE-1999-0122

IBM AIX - Buffer Overflow in lchangelv

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-1999-0122. PoCs published by Bryan P. Self.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in lchangelv on AIX systems. It leverages the SUID root binary to escalate privileges by overflowing a buffer with shellcode, granting root access.

Description

Buffer overflow in AIX lchangelv gives root access.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Bryan P. Self · clocalaix

https://www.exploit-db.com/exploits/19309

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in lchangelv on AIX systems. It leverages the SUID root binary to escalate privileges by overflowing a buffer with shellcode, granting root access.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: AIX lchangelv (version not specified)

Auth required

Prerequisites: Attacker must have GID or EGID of 'system' · Access to execute /usr/sbin/lchangelv

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1

Core References

Third Party Advisory, VDB Entry x_refsource_misc

https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0122

Scores

EPSS 0.0110

EPSS Percentile 61.4%

Details

Status published

Products (7)

ibm/aix 4.1

ibm/aix 4.1.1

ibm/aix 4.1.2

ibm/aix 4.1.3

ibm/aix 4.1.4

ibm/aix 4.1.5

ibm/aix 4.2

Published Jul 21, 1997

Tracked Since Feb 18, 2026