Unscored severity · published Jul 26, 2007
CVE-2007-4004
Buffer overflow in the ftp client in IBM AIX 5.3 SP6 and 5.2.0 allows local users to execute arbitrary code via unspecified vectors that trigger the overflow in a gets function…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Buffer overflow in the ftp client in IBM AIX 5.3 SP6 and 5.2.0 allows local users to execute arbitrary code via unspecified vectors that trigger the overflow in a gets function call. NOTE: the client is setuid root on AIX, so this issue crosses privilege boundaries.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
Aix · Ibm
5.2.0; 5.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4004
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4004
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=571
Vendor Advisory
http://secunia.com/advisories/26219
www-1.ibm.com
http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01812
www-1.ibm.com
http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01813
www.securityfocus.com
http://www.securityfocus.com/bid/25077
More from Aix
10.0
CVE-2024-56346
IBM AIX command execution
9.9
CVE-2026-18835
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-16816
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-15068
Vulnerabilities in IBM AIX and PowerVM VIOS
9.8
CVE-2026-19437
Vulnerabilities in IBM AIX and PowerVM VIOS