CVE-2004-1330

IBM AIX 5.1-5.3 - Local Buffer Overflow via Long Username

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-1330. PoCs published by cees-bart.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in AIX 5.2's paginit binary. It uses a crafted environment variable to overwrite the return address and execute shellcode, resulting in arbitrary command execution.

Description

Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username.

Exploits (1)

exploitdb WORKING POC VERIFIED

by cees-bart · clocalaix

https://www.exploit-db.com/exploits/699

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in AIX 5.2's paginit binary. It uses a crafted environment variable to overwrite the return address and execute shellcode, resulting in arbitrary command execution.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: AIX 5.2 paginit

No auth needed

Prerequisites: Access to the target system · Ability to execute /usr/bin/paginit

MITRE ATT&CK