Vulnerabilities > IBM > AIX > 5.3.10

DATE CVE VULNERABILITY TITLE RISK
2009-10-15 CVE-2009-3699 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in IBM AIX and Vios
Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd.
network
low complexity
ibm CWE-119
critical
10.0
2009-08-10 CVE-2009-2727 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in IBM AIX
Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary code via a long XDR-encoded ASCII string to remote procedure 15.
network
ibm CWE-119
critical
9.3