Unscored severity · published Nov 1, 2005
CVE-2005-3396
Buffer overflow in the chcons (chcon) command in IBM AIX 5.2 and 5.3, when DEBUG MALLOC is enabled, might allow attackers to execute arbitrary code via a long command line…
–
CVSS
3.4%
EPSS
No
On KEV
Description
Buffer overflow in the chcons (chcon) command in IBM AIX 5.2 and 5.3, when DEBUG MALLOC is enabled, might allow attackers to execute arbitrary code via a long command line argument.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.4% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
Aix · Ibm
5.1; 5.1l; 5.2; 5.2.2; 5.2_l; 5.3; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3396
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3396
Patch
http://secunia.com/advisories/17380
securityreason.com
http://securityreason.com/securityalert/261
Patch
http://securitytracker.com/id?1015122
www-1.ibm.com
http://www-1.ibm.com/support/docview.wss?uid=isg1IY78241
www-1.ibm.com
http://www-1.ibm.com/support/docview.wss?uid=isg1IY78253
www.securityfocus.com
http://www.securityfocus.com/bid/15247
More from Aix
10.0
CVE-2024-56346
IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls
9.9
CVE-2026-18835
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-16816
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-15068
Vulnerabilities in IBM AIX and PowerVM VIOS
9.8
CVE-2026-19437
Vulnerabilities in IBM AIX and PowerVM VIOS