PT-2008-2210 · Ibm · Ibm Aix

Published 2008-02-05 · Updated 2017-09-29 · CVE-2008-0584

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.2 through 5.3

Description The issue concerns multiple buffer overflows in the bos.rte.control component. These overflows can be exploited by local users to gain privileges. The exploitation vectors are related to the swap, swapoff, and swapon programs.

Recommendations For IBM AIX versions 5.2 through 5.3, consider restricting access to the swap, swapoff, and swapon programs until a fix is available. As a temporary workaround, limiting the use of these programs can help minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-0584

Affected Products

Ibm Aix

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2008-0584 · Security Note
• http://ibm.com/support/docview.wss?uid=isg1IY96101 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=isg1IY96095 · Vendor Advisory
• http://secunia.com/advisories/28609 · Vendor Advisory
• http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4064 · Note
• http://vupen.com/english/advisories/2008/0261 · Note
• http://securityfocus.com/bid/27432 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5744 · Note