PT-2008-2215 · Ibm · Ibm Aix

Published 2008-02-05 · Updated 2017-08-08 · CVE-2008-0589

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.2 through 6.1

Description The issue allows local users to obtain sensitive information via unspecified vectors in the ps program within bos.rte.control.

Recommendations For IBM AIX versions 5.2 through 6.1, consider restricting access to the ps program until a fix is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2008-0589

Affected Products

Ibm Aix

References · 11

• http://ibm.com/support/docview.wss?uid=isg1IZ11243 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0589 · Security Note
• http://ibm.com/support/docview.wss?uid=isg1IZ11242 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=isg1IZ12745 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=isg1IZ11244 · Vendor Advisory
• http://secunia.com/advisories/28609 · Vendor Advisory
• http://vupen.com/english/advisories/2008/0261 · Note
• http://securitytracker.com/id?1019265 · Note
• http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4075 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39911 · Note
• http://securityfocus.com/bid/27434 · Note