PT-2008-2210 · Ibm · Ibm Aix

Publicado 2008-02-05 · Atualizado 2017-09-29 · CVE-2008-0584

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.2 through 5.3

Description The issue concerns multiple buffer overflows in the bos.rte.control component. These overflows can be exploited by local users to gain privileges. The exploitation vectors are related to the swap, swapoff, and swapon programs.

Recommendations For IBM AIX versions 5.2 through 5.3, consider restricting access to the swap, swapoff, and swapon programs until a fix is available. As a temporary workaround, limiting the use of these programs can help minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-0584

Produtos afetados

Ibm Aix

Referências · 8

• http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4064 · Nota
• http://vupen.com/english/advisories/2008/0261 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0584 · Nota de Segurança
• http://securityfocus.com/bid/27432 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5744 · Nota
• http://ibm.com/support/docview.wss?uid=isg1IY96101 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=isg1IY96095 · Aviso do Fabricante
• http://secunia.com/advisories/28609 · Aviso do Fabricante