10

CVE-2009-3699: ibm aix

CVSS: 10.0v2.0HighModified
Published 15-10-2009Last modified 07-08-2024
Open JSON

Vulnerability summary

CVE-2009-3699 is a high (CVSS 10.0) vulnerability in ibm aix. EPSS estimates a 62.34% chance of exploitation in the next 30 days, higher than 99.1% of scored vulnerabilities. 3 public exploits are recorded.

Overall risk
90/100
0100
Critical · default modelHow is this calculated?
CVSS score
10.0/10
010
High · v2.0 (NVD)
EPSS score
62.34%
0%100%
Critical · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits3reference, exploit-database, metasploit

Timeline

  1. 15-10-2009
    PublishedVulnerability first disclosed.
  2. 07-08-2024
    Last modifiedVulnerability information updated.

Description

Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

62.34%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 62.34% on 20-09-2026

20-09-202620-10-2026
EPSS score
62.34%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found
  • referenceUnverified

    Exploit Reference (securityfocus.com)

    Maturity: unknown

  • exploit-databasedosaixVerified

    AIX Calendar Manager Service Daemon (rpc.cmsd) Opcode 21 - Buffer Overflow (Metasploit)

    Maturity: poc

  • MetasploitMetasploitremoteVerified

    AIX Calendar Manager Service Daemon (rpc.cmsd) Opcode 21 Buffer Overflow

    exploit/aix/rpc_cmsd_opcode21

    Maturity: weaponized

Weaknesses

CWE · root cause

Affected systems

Ibm2 products
  • aix5 | 5.1 | 5.1.0.10 | 5.1l | 5.2 | 5.2.0 | 5.2.0.50 | 5.2.0.54 | 5.2.2 | 5.2_l | 5.3 | 5.3:sp6 | 5.3.0 | 5.3.0.20 | 5.3.7 | 5.3.8 | 5.3.9 | 5.3.10 | 5.3_l | 5.3_ml03 | 5l | 6.1 | 6.1.0 | 6.1.1 | 6.1.2 | 6.1.3
  • vios≤ 2.1.0 | 1.4 | 1.5.0 | 1.5.1 | 1.5.2

1 vendor · 2 products

References

18 links
Show all 18 references