CVE-2009-2727
Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0...
- Published
- Aug 10, 2009
- Updated
- Sep 16, 2024
- Assigning CNA
- mitre
- Evidence observed
- Nov 11, 2010
Primary CVSS
nvd · CVSS 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:CModerate · next 30 days
- Percentile
- 98.0%
- Model date
- Oct 14, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary code via a long XDR-encoded ASCII string to remote procedure 15.
Sources
modules/exploits/aix/rpc_ttdbserverd_realpath.rb
Metasploit Framework modulesDeclared conditions
- platform: AIX($.exploit_aix/rpc_ttdbserverd_realpath.platform)
- verification: check_not_declared($.exploit_aix/rpc_ttdbserverd_realpath.check)
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.