CVE-2008-2515

Sažetak

Unspecified vulnerability in iostat in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via unknown vectors related to an "environment variable handling error."

Reference

http://aix.software.ibm.com/aix/efixes/security/iostat_advisory.asc
http://secunia.com/advisories/30349
http://securitytracker.com/id?1020085
http://www.ibm.com/support/docview.wss?uid=isg1IZ20635
http://www.ibm.com/support/docview.wss?uid=isg1IZ21506
http://www.ibm.com/support/docview.wss?uid=isg1IZ22349
http://www.ibm.com/support/docview.wss?uid=isg1IZ22350
http://www.ibm.com/support/docview.wss?uid=isg1IZ22351
http://www.securityfocus.com/bid/29325
http://www.vupen.com/english/advisories/2008/1626/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42579
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5424

CVSS

Base:	7.2
Impact:	10.0
Exploitability:	3.9

Pristup

Vektor	Složenost	Autentikacija
LOCAL	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:L/AC:L/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

29-09-2017 - 01:31

Objavljeno

02-06-2008 - 21:30