CVSS: 7.2EPSS: 0%CPEs: 2EXPL: 0CVE-2008-1601
https://notcve.org/view.php?id=CVE-2008-1601
Stack-based buffer overflow in the reboot program on IBM AIX 5.2 and 5.3 allows local users in the shutdown group to gain privileges. Desbordamiento de búfer basado en pila en el programa de reinicio de IBM AIX 5.2 y 5.3 permite a usuarios locales obtener privilegios en el grupo shutdown (apagado). • http://secunia.com/advisories/29347 http://securitytracker.com/id?1019602 http://www.ibm.com/support/docview.wss?uid=isg1IZ15479 http://www.ibm.com/support/docview.wss?uid=isg1IZ15480 http://www.vupen.com/english/advisories/2008/0865 http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4162 http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd? • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.2EPSS: 0%CPEs: 2EXPL: 0CVE-2008-0584
https://notcve.org/view.php?id=CVE-2008-0584
Multiple buffer overflows in bos.rte.control in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to the (1) swap, (2) swapoff, and (3) swapon programs. Múltiples desbordamientos de búfer en bos.rte.contro. en IBM AIX 5.2 y 5.3 permiten a usuarios locales conseguir privilegios a través de vector no especificados relativos a los programas (1)swap, (2) swapoff, y (3) swapon. • http://secunia.com/advisories/28609 http://www.ibm.com/support/docview.wss?uid=isg1IY96095 http://www.ibm.com/support/docview.wss?uid=isg1IY96101 http://www.securityfocus.com/bid/27432 http://www.vupen.com/english/advisories/2008/0261 http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4064 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5744 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.2EPSS: 0%CPEs: 2EXPL: 0CVE-2008-0587
https://notcve.org/view.php?id=CVE-2008-0587
Buffer overflow in the uspchrp program in devices.chrp.base.diag in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors. Desbordamiento de búfer en el programa uspchrp en devices.chrp.base.diag en IBM AIX 5.2 y 5.3 permite a usuarios locales ganar privilegios a través de vectores no especificados. • http://secunia.com/advisories/28609 http://www.ibm.com/support/docview.wss?uid=isg1IZ06261 http://www.ibm.com/support/docview.wss?uid=isg1IZ06489 http://www.ibm.com/support/docview.wss?uid=isg1IZ06621 http://www.securityfocus.com/bid/27429 http://www.vupen.com/english/advisories/2008/0261 http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4072 https://exchange.xforce.ibmcloud.com/vulnerabilities/39910 https://oval.cisecurity.org/repository/search/definition/oval% • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.2EPSS: 0%CPEs: 2EXPL: 0CVE-2008-0588
https://notcve.org/view.php?id=CVE-2008-0588
Buffer overflow in the utape program in devices.scsi.tape.diag in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors. Desbordamiento de búfer en el programa utape en devices.scsi.tape.diag de IBM AIX 5.2 y 5.3 permite a usuarios locales conseguir privilegios a través de vectores no especificados. • http://secunia.com/advisories/28609 http://www.ibm.com/support/docview.wss?uid=isg1IZ06260 http://www.ibm.com/support/docview.wss?uid=isg1IZ06488 http://www.ibm.com/support/docview.wss?uid=isg1IZ06620 http://www.securityfocus.com/bid/27430 http://www.vupen.com/english/advisories/2008/0261 http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4070 https://exchange.xforce.ibmcloud.com/vulnerabilities/39909 https://oval.cisecurity.org/repository/search/definition/oval% • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 4.9EPSS: 0%CPEs: 3EXPL: 0CVE-2008-0589
https://notcve.org/view.php?id=CVE-2008-0589
The ps program in bos.rte.control in IBM AIX 5.2, 5.3, and 6.1 allows local users to obtain sensitive information via unspecified vectors. El programa ps en bos.rte.control de IBM AIX 5.2, 5.3 y 6.1. Permite a usuarios locales obtener información sensible a través de vectores no especificados. • http://secunia.com/advisories/28609 http://securitytracker.com/id?1019265 http://www.ibm.com/support/docview.wss?uid=isg1IZ11242 http://www.ibm.com/support/docview.wss?uid=isg1IZ11243 http://www.ibm.com/support/docview.wss?uid=isg1IZ11244 http://www.ibm.com/support/docview.wss? • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •