Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd.

There is a buffer overflow vulnerability in the calendar daemon library libcsa.a. A remote attacker can exploit this vulnerability when the rpc.cmsd calendar daemon is enabled in /etc/inetd.conf.

The successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code as the root user.

The following libraries and executables are vulnerable :

/usr/dt/bin/rpc.cmsd /usr/dt/lib/libcsa.a.

ID	Name	Product	Family	Severity
64352	AIX 6.1 TL 3 : cmsd (IZ62572)	Nessus	AIX Local Security Checks	critical
64351	AIX 6.1 TL 2 : cmsd (IZ62571)	Nessus	AIX Local Security Checks	critical
64350	AIX 6.1 TL 1 : cmsd (IZ62570)	Nessus	AIX Local Security Checks	critical
64349	AIX 6.1 TL 0 : cmsd (IZ62569)	Nessus	AIX Local Security Checks	critical
64348	AIX 5.3 TL 8 : cmsd (IZ62237)	Nessus	AIX Local Security Checks	critical
64347	AIX 5.3 TL 10 : cmsd (IZ62123)	Nessus	AIX Local Security Checks	critical
64346	AIX 5.3 TL 9 : cmsd (IZ61717)	Nessus	AIX Local Security Checks	critical
64345	AIX 5.3 TL 7 : cmsd (IZ61628)	Nessus	AIX Local Security Checks	critical

Detections

Analytics

CVE-2009-3699

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical