{"id":"CVE-2007-4353","aliases":["EUVD-2007-4336","GHSA-5wh2-cc55-8p87"],"status":"published","title":"Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain...","description":"Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain root privileges via unspecified vectors involving the (1) chpath, (2) rmpath, and (3) devinstall programs in bos.rte.methods.","severity":{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00345,"percentile":0.28307,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2007-08-15T00:00:00Z","modified":"2026-06-16T22:43:53Z","products":[{"vendor":"ibm","product":"aix"}],"references":[{"url":"http://www.vupen.com/english/advisories/2007/2860","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ00531","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35971","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01433","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"http://www.securitytracker.com/id?1018549","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://secunia.com/advisories/26420","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"ftp://aix.software.ibm.com/aix/efixes/security/README","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://www.securityfocus.com/bid/25270","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-4353"},{"url":"https://github.com/advisories/GHSA-5wh2-cc55-8p87"}],"sources":{"cve":[{"id":"CVE-2007-4353","description":"Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain root privileges via unspecified vectors involving the (1) chpath, (2) rmpath, and (3) devinstall programs in bos.rte.methods.","status":"published","published":"2007-08-15T00:00:00Z","modified":"2024-08-07T14:53:55.784Z","updated_at":"2026-11-02T13:33:19.093583Z"}],"euvd":[{"id":"EUVD-2007-4336","description":"Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain root privileges via unspecified vectors involving the (1) chpath, (2) rmpath, and (3) devinstall programs in bos.rte.methods.","status":"published","published":"2007-08-15T00:00:00Z","modified":"2024-08-07T14:53:55Z","updated_at":"2026-11-03T01:16:22.0225Z"}],"ghsa":[{"id":"GHSA-5wh2-cc55-8p87","title":"Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain...","description":"Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain root privileges via unspecified vectors involving the (1) chpath, (2) rmpath, and (3) devinstall programs in bos.rte.methods.","status":"published","published":"2022-05-03T03:18:23Z","modified":"2023-02-01T05:01:30Z","updated_at":"2026-11-02T14:49:43.819101Z"}],"nvd":[{"id":"CVE-2007-4353","description":"Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain root privileges via unspecified vectors involving the (1) chpath, (2) rmpath, and (3) devinstall programs in bos.rte.methods.","status":"published","published":"2007-08-15T00:17:00Z","modified":"2026-06-16T22:43:53.703Z","cvss":[{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:19.102336Z"}]}}