iDefense Security Advisory 10.07.09 – Remote exploitation of a stack based buffer overflow vulnerability in IBM Corp.’s AIX could allow an attacker to execute arbitrary code with the privileges of the affected service. rpc.cmsd, more commonly known as the Calendar Manager Service Daemon, is an RPC application used to manage schedules and calendars. It operates over SUN RPC. The vulnerability is triggered when handling a request for remote procedure 21. This function takes two arguments, both of which are XDR strings. When copying the first argument into a stack based buffer, the code does not properly verify its length. This results in a stack based buffer overflow vulnerability. iDefense has confirmed the existence of this vulnerability in AIX versions 5.3 and 5.2.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/81866/10.07.09-1.txt
Source: https://packetstormsecurity.com/files/81866/iDEFENSE-Security-Advisory-2009-10-07.1.html