CVE-2008-2709

Severity Score

5.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 allows local users to cause a denial of service (task halt and main storage dump) via unspecified vectors involving the running of diagnostics on a modem port. NOTE: there might be limited attack scenarios.

Desbordamiento de buffer en la función BrSmRcvAndCheck en el módulo RCHMGR de IBM OS/400 V5R4M0, V5R4M5, y V6R1M0, permite a atacantes locales provocar una denegación de servicio (parada de tarea y volcado de almacemiento principal), a través de vectores no especificados involucrados en la ejecución de diagnósticos en un puerto de modem. NOTA: Podría haber escenarios de ataque limitados.

*Credits: N/A

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Local

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2008-06-16 CVE Reserved
2008-06-16 CVE Published
2024-08-07 CVE Updated
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (5)

URL	Tag	Source
http://www.securityfocus.com/bid/29660	Vdb Entry
http://www.vupen.com/english/advisories/2008/1799	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/42984	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/30554	2017-08-08
http://www-1.ibm.com/support/docview.wss?uid=nas21f21bcbaa63f55268625745e003c6f64	2017-08-08

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Ibm Search vendor "Ibm"		Os 400 Search vendor "Ibm" for product "Os 400"				v5r4m0 Search vendor "Ibm" for product "Os 400" and version "v5r4m0"		-		Affected
Ibm Search vendor "Ibm"		Os 400 Search vendor "Ibm" for product "Os 400"				v5r4m5 Search vendor "Ibm" for product "Os 400" and version "v5r4m5"		-		Affected
Ibm Search vendor "Ibm"		Os 400 Search vendor "Ibm" for product "Os 400"				v6r1m0 Search vendor "Ibm" for product "Os 400" and version "v6r1m0"		-		Affected