CVE-2009-3699

This Metasploit module exploits a stack-based buffer overflow in the AIX Calendar Manager Service Daemon (rpc.cmsd) via opcode 21. It achieves arbitrary code execution by sending a maliciously crafted RPC request with an overly long string to the 'rtable_create' function.

This Metasploit module exploits a stack-based buffer overflow in the AIX Calendar Manager Service Daemon (rpc.cmsd) via opcode 21, leading to arbitrary code execution. It uses a brute-force approach to bypass memory randomization and includes heap spraying to address PowerPC cache issues.