CVE-2007-4796: Buffer overflow in uucp in bos.net.uucp in IBM AIX 5.2 and 5.3 allows local users to gain privileges via un...

Security readout for executives and security teams

This is an old IBM AIX local privilege-escalation issue. A user who already has local access to an affected AIX 5.2 or 5.3 system may be able to gain higher privileges through a buffer overflow in uucp. Exposure is most likely on legacy IBM AIX 5.2 or 5.3 hosts where bos.net.uucp or uucp remains installed. Risk depends on whether local user access exists, especially shared administrative, application, batch, or third-party support accounts. Treat this as high priority for any remaining AIX 5.2 or 5.3 estate, especially shared or regulated systems. It is less urgent where those versions are absent or local access is tightly controlled. Mitigation focus: Review IBM APAR guidance for IY95852 and IY97215.; Apply the vendor-provided AIX maintenance or fix level where applicable.; Remove or disable uucp if it is not operationally required..

Prepared

Jun 29, 2026, 03:38 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.