CVE-2009-2727

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 26.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-08-10 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary code via a long XDR-encoded ASCII string to remote procedure 15.

Affected products

IBM AIX: 5.2, 5.2.0, 5.2.0.50, 5.2.0.54, 5.2.2, 5.2_l (+10)

References

http://aix.software.ibm.com/aix/efixes/security/libtt_advisory.asc
http://risesecurity.org/advisories/RISE-2009001.txt
http://secunia.com/advisories/35505
http://www.ibm.com/support/docview.wss?uid=isg1IZ52842
http://www.ibm.com/support/docview.wss?uid=isg1IZ52843
http://www.ibm.com/support/docview.wss?uid=isg1IZ52844
http://www.ibm.com/support/docview.wss?uid=isg1IZ52845
http://www.ibm.com/support/docview.wss?uid=isg1IZ52846
http://www.ibm.com/support/docview.wss?uid=isg1IZ52847
http://www.ibm.com/support/docview.wss?uid=isg1IZ52848
http://www.ibm.com/support/docview.wss?uid=isg1IZ52849
http://www.ibm.com/support/docview.wss?uid=isg1IZ52850

Get alerted when CVE-2009-2727 or the next vulnerability affects your stack