CVE-2007-4353
Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain...
Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain root privileges via unspecified vectors involving the (1) chpath, (2) rmpath, and (3) devinstall programs in bos.rte.methods.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain root privileges via unspecified vectors involving the (1) chpath, (2) rmpath, and (3) devinstall programs in bos.rte.methods.
- Record
CVE-2007-4353- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain root privileges via unspecified vectors involving the (1) chpath, (2) rmpath, and (3) devinstall programs in bos.rte.methods.
- Record
CVE-2007-4353- Updated
- 2026-11-02
EUVDEUVD-2007-4336 No score
Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain root privileges via unspecified vectors involving the (1) chpath, (2) rmpath, and (3) devinstall programs in bos.rte.methods.
- Record
EUVD-2007-4336- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5wh2-cc55-8p87 No score
Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain...
Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain root privileges via unspecified vectors involving the (1) chpath, (2) rmpath, and (3) devinstall programs in bos.rte.methods.
- Record
GHSA-5wh2-cc55-8p87- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4353 is a medium vulnerability (CVSS 6.9) in Ibm Aix, published August 15, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 28th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2007/2860
www-1.ibm.com/support/docview.wss?uid=isg1IZ00531
exchange.xforce.ibmcloud.com/vulnerabilities/35971
securitytracker.com/id?1018549
secunia.com/advisories/26420
securityfocus.com/bid/25270
nvd.nist.gov/vuln/detail/CVE-2007-4353
github.com/advisories/GHSA-5wh2-cc55-8p87