CVE-2005-3396
IBM AIX 5.2-5.3 - Buffer Overflow via Long Command Line Argument
Title source: llmDescription
Buffer overflow in the chcons (chcon) command in IBM AIX 5.2 and 5.3, when DEBUG MALLOC is enabled, might allow attackers to execute arbitrary code via a long command line argument.
References (8)
Core 8
Core References
Patch vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1015122
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2253
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/17380
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5470
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/261
Various Sources vendor-advisory
x_refsource_aixapar
http://www-1.ibm.com/support/docview.wss?uid=isg1IY78253
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/15247
Various Sources vendor-advisory
x_refsource_aixapar
http://www-1.ibm.com/support/docview.wss?uid=isg1IY78241
Scores
EPSS
0.0342
EPSS Percentile
87.7%
Details
Status
published
Products (7)
ibm/aix
5.1
ibm/aix
5.1l
ibm/aix
5.2
ibm/aix
5.2.2
ibm/aix
5.2_l
ibm/aix
5.3
ibm/aix
5.3_l
Published
Nov 01, 2005
Tracked Since
Feb 18, 2026