CVSS: 4.6EPSS: 0%CPEs: 4EXPL: 0CVE-2008-3248
https://notcve.org/view.php?id=CVE-2008-3248
qiomkfile in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, does not initialize filesystem blocks during creation of a file, which allows local users to obtain sensitive information by creating and then reading files. qiomkfile en el Quick I/O para la base de datos en Symantec Veritas File System (VxFS) sobre HP-UX, y anterior a la v5.0 MP3 sobre Solaris, Linux, y AIX, no inicializa el bloque de ficheros durante la creación de un archivo, lo que permite obtener información sensible mediante la creación y lectura de archivos. • http://secunia.com/advisories/32332 http://seer.entsupport.symantec.com/docs/310872.htm http://www.security-objectives.com/advisories/SECOBJADV-2008-04.txt http://www.security-objectives.com/advisories/SECOBJSADV-2008-04.txt http://www.securityfocus.com/archive/1/497626/100/0/threaded http://www.securityfocus.com/bid/31678 http://www.securitytracker.com/id?1021074 http://www.symantec.com/avcenter/security/Content/2008.10.20.html http://www.vupen.com/english/advisories/2008/2875 https& • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.6EPSS: 0%CPEs: 4EXPL: 0CVE-2008-4638
https://notcve.org/view.php?id=CVE-2008-4638
qioadmin in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message. qioadmin en E/S Quick para la funcionalidad Database en Veritas File System (VxFS) de Symantec en HP-UX, y MP3 anterior a versión 5.0 en Solaris, Linux y AIX, permite a los usuarios locales leer archivos arbitrarios al causar que qioadmin escriba un contenido de archivo para un error estándar en un mensaje de error. • http://seer.entsupport.symantec.com/docs/310872.htm http://www.security-objectives.com/advisories/SECOBJSADV-2008-05.txt http://www.securityfocus.com/archive/1/497675/100/0/threaded http://www.securityfocus.com/bid/31679 http://www.symantec.com/avcenter/security/Content/2008.10.20.html http://www.vupen.com/english/advisories/2008/2875 https://exchange.xforce.ibmcloud.com/vulnerabilities/46009 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •