Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands.

Exploit prediction (EPSS)

1.22% probability of exploitation in the next 30 days, higher than 69% of all scored CVEs.

Exploits and detections

• EDB-23841 AIX 4.3.3/5.x - Getlvcb Command Line Argument Buffer Overflow (2) · local · 2004-03-17
• EDB-23840 AIX 4.3.3/5.x - Getlvcb Command Line Argument Buffer Overflow (1) · local · 2003-05-30

CVSS scores

References

• osvdb.org /4392 · vdb-entry, x_refsource_OSVDB, x_transferred
• www-1.ibm.com /support/docview.wss?uid=isg1IY55682 · vendor-advisory, x_refsource_AIXAPAR, x_transferred
• securityfocus.com /bid/9906 · vdb-entry, x_refsource_BID, x_transferred
• www-1.ibm.com /support/docview.wss?uid=isg1IY55681 · vendor-advisory, x_refsource_AIXAPAR, x_transferred
• secunia.com /advisories/11158/ · third-party-advisory, x_refsource_SECUNIA, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/18317 · vdb-entry, x_refsource_XF, x_transferred
• securityfocus.com /bid/9905 · vdb-entry, x_refsource_BID, x_transferred
• ciac.org /ciac/bulletins/o-131.shtml · third-party-advisory, government-resource, x_refsource_CIAC, x_transferred
• osvdb.org /4393 · vdb-entry, x_refsource_OSVDB, x_transferred
• www-1.ibm.com /services/continuity/recover1.nsf/mss/MSS-OAR-E01-2004.0544.2 · vendor-advisory, x_refsource_IBM, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/15555 · vdb-entry, x_refsource_XF, x_transferred

Sources

• CVE List: CVE-2004-0544
• NVD: CVE-2004-0544

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.