CVE-2007-4353

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-08-15 · updated 2026-06-16

Description

Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain root privileges via unspecified vectors involving the (1) chpath, (2) rmpath, and (3) devinstall programs in bos.rte.methods.

Affected products

IBM AIX: 5.2, 5.3

References

http://secunia.com/advisories/26420
http://www-1.ibm.com/support/docview.wss?uid=isg1IZ00531
http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01433
http://www.securityfocus.com/bid/25270
http://www.securitytracker.com/id?1018549
http://www.vupen.com/english/advisories/2007/2860
https://exchange.xforce.ibmcloud.com/vulnerabilities/35971
http://secunia.com/advisories/26420
http://www-1.ibm.com/support/docview.wss?uid=isg1IZ00531
http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01433

Get alerted when CVE-2007-4353 or the next vulnerability affects your stack