Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary code via a long XDR-encoded ASCII string to remote procedure 15.

There is a buffer overflow vulnerability in the ToolTalk library libtt.a. A remote attacker can exploit this vulnerability when the rpc.ttdbserver is enabled in /etc/inetd.conf. 

The successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code as the root user.

The following libraries and executables are vulnerable :

/usr/dt/lib/libtt.a /usr/dt/bin/rpc.ttdbserver.

The remote host is missing AIX PTF U829313, which is related to the security of the package X11.Dt.ToolTalk.

The remote host is missing AIX PTF U828448, which is related to the security of the package X11.Dt.ToolTalk.

There is a buffer overflow vulnerability in the ToolTalk library libtt.a. A remote attacker can exploit this vulnerability when the rpc.ttdbserver is enabled in /etc/inetd.conf. 

The successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code as the root user.

The following libraries and executables are vulnerable :

/usr/dt/lib/libtt.a /usr/dt/bin/rpc.ttdbserver.

The remote host is missing AIX PTF U829609, which is related to the security of the package X11.Dt.ToolTalk.

There is a buffer overflow vulnerability in the ToolTalk library libtt.a. A remote attacker can exploit this vulnerability when the rpc.ttdbserver is enabled in /etc/inetd.conf. 

The successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code as the root user.

The following libraries and executables are vulnerable :

/usr/dt/lib/libtt.a /usr/dt/bin/rpc.ttdbserver.

The remote host is missing AIX PTF U829533, which is related to the security of the package X11.Dt.ToolTalk.

There is a buffer overflow vulnerability in the ToolTalk library libtt.a. A remote attacker can exploit this vulnerability when the rpc.ttdbserver is enabled in /etc/inetd.conf. 

The successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code as the root user.

The following libraries and executables are vulnerable :

/usr/dt/lib/libtt.a /usr/dt/bin/rpc.ttdbserver.

The remote host is missing AIX PTF U829416, which is related to the security of the package X11.Dt.ToolTalk.

There is a buffer overflow vulnerability in the ToolTalk library libtt.a. A remote attacker can exploit this vulnerability when the rpc.ttdbserver is enabled in /etc/inetd.conf. 

The successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code as the root user.

The following libraries and executables are vulnerable :

/usr/dt/lib/libtt.a /usr/dt/bin/rpc.ttdbserver.

The remote host is missing AIX PTF U828611, which is related to the security of the package X11.Dt.ToolTalk.

There is a buffer overflow vulnerability in the ToolTalk library libtt.a. A remote attacker can exploit this vulnerability when the rpc.ttdbserver is enabled in /etc/inetd.conf. 

The successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code as the root user.

The following libraries and executables are vulnerable :

/usr/dt/lib/libtt.a /usr/dt/bin/rpc.ttdbserver.

The remote host is missing AIX PTF U828561, which is related to the security of the package X11.Dt.ToolTalk.

There is a buffer overflow vulnerability in the ToolTalk library libtt.a. A remote attacker can exploit this vulnerability when the rpc.ttdbserver is enabled in /etc/inetd.conf. 

The successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code as the root user.

The following libraries and executables are vulnerable :

/usr/dt/lib/libtt.a /usr/dt/bin/rpc.ttdbserver.

The remote host is missing AIX PTF U828317, which is related to the security of the package X11.Dt.ToolTalk.

There is a buffer overflow vulnerability in the ToolTalk library libtt.a. A remote attacker can exploit this vulnerability when the rpc.ttdbserver is enabled in /etc/inetd.conf. 

The successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code as the root user.

The following libraries and executables are vulnerable :

/usr/dt/lib/libtt.a /usr/dt/bin/rpc.ttdbserver.

The remote host is missing AIX PTF U827247, which is related to the security of the package X11.Dt.ToolTalk.

There is a buffer overflow vulnerability in the ToolTalk library libtt.a. A remote attacker can exploit this vulnerability when the rpc.ttdbserver is enabled in /etc/inetd.conf. 

The successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code as the root user.

The following libraries and executables are vulnerable :

/usr/dt/lib/libtt.a /usr/dt/bin/rpc.ttdbserver.

ID	Name	Product	Family	Severity
64340	AIX 6.1 TL 3 : libtt (IZ52851)	Nessus	AIX Local Security Checks	high
64339	AIX 6.1 TL 2 : libtt (IZ52850)	Nessus	AIX Local Security Checks	high
64338	AIX 6.1 TL 1 : libtt (IZ52849)	Nessus	AIX Local Security Checks	high
64337	AIX 6.1 TL 0 : libtt (IZ52848)	Nessus	AIX Local Security Checks	high
64336	AIX 5.3 TL 9 : libtt (IZ52846)	Nessus	AIX Local Security Checks	high
64335	AIX 5.3 TL 8 : libtt (IZ52845)	Nessus	AIX Local Security Checks	high
64334	AIX 5.3 TL 7 : libtt (IZ52844)	Nessus	AIX Local Security Checks	high
64333	AIX 5.3 TL 0 : libtt (IZ52843)	Nessus	AIX Local Security Checks	high
64332	AIX 5.2 TL 0 : libtt (IZ52842)	Nessus	AIX Local Security Checks	high
44282	AIX 5.3 TL 10 : X11.Dt.ToolTalk (U829313)	Nessus	AIX Local Security Checks	high
43473	AIX 6.1 TL 3 : X11.Dt.ToolTalk (U828448)	Nessus	AIX Local Security Checks	high
42755	AIX 5.3 TL 7 : X11.Dt.ToolTalk (U829609)	Nessus	AIX Local Security Checks	high
42705	AIX 5.3 TL 8 : X11.Dt.ToolTalk (U829533)	Nessus	AIX Local Security Checks	high
42636	AIX 5.3 TL 9 : X11.Dt.ToolTalk (U829416)	Nessus	AIX Local Security Checks	high
41917	AIX 6.1 : X11.Dt.ToolTalk (U828611)	Nessus	AIX Local Security Checks	high
41881	AIX 6.1 TL 1 : X11.Dt.ToolTalk (U828561)	Nessus	AIX Local Security Checks	high
41753	AIX 6.1 TL 2 : X11.Dt.ToolTalk (U828317)	Nessus	AIX Local Security Checks	high
39829	AIX 5.2 TL 10 : X11.Dt.ToolTalk (U827247)	Nessus	AIX Local Security Checks	high

Detections

Analytics

CVE-2009-2727

critical

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high