iDefense Security Advisory 10.30.07 – Local exploitation of a buffer overflow vulnerability in the ftp client of IBM Corp.’s AIX operating system allows attackers to execute arbitrary code with root privileges. The problem specifically exists within the domacro() function. This function is called when executing a macro via the ‘$’ command within the ftp program. When executing a macro, the parameter is copied to a fixed size stack buffer using an unbounded call to strcpy(). By specifying a long argument, an attacker is able to overwrite program control data located on the stack and take control of the affected process. iDefense has confirmed the existence of this vulnerability in AIX version 5.3 (5300-06). Previous versions are suspected to be vulnerable.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/60550/10.30.07-6.txt
Source: https://packetstormsecurity.com/files/60550/iDEFENSE-Security-Advisory-2007-10-30.6.html