CVE-2004-2312

IBM AIX 4.3.3 - Local Privilege Escalation via GNU make CC Argument Buffer Overflow

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-2312. PoCs published by watercloud.

AI-analyzed exploit summary This exploit targets a buffer overflow in GNU make for IBM AIX 4.3.3, leveraging insufficient boundary checks when reading the CC compiler path. It attempts to gain root group access via a setGID privilege escalation.

Description

Buffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain privileges via a long CC argument.

Exploits (1)

exploitdb WORKING POC VERIFIED

by watercloud · perllocalaix

https://www.exploit-db.com/exploits/23838

View Code ZIP pw:eip

This exploit targets a buffer overflow in GNU make for IBM AIX 4.3.3, leveraging insufficient boundary checks when reading the CC compiler path. It attempts to gain root group access via a setGID privilege escalation.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: GNU make on IBM AIX 4.3.3

No auth needed

Prerequisites: Local access to the target system · GNU make installed with setGID root privileges

MITRE ATT&CK