CVEvulnerability

CVE-2008-1595

4.9 MEDIUM Published 2008-03-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-03-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.9 MEDIUM — AV:L/AC:L/Au:N/C:C/I:N/A:N
Weaknesses
CWE-264

Description

The proc filesystem in the kernel in IBM AIX 5.2 and 5.3 does not properly enforce directory permissions when a file executing from a directory has weaker permissions than the directory itself, which allows local users to obtain sensitive information.

Affected configurations

• ibm aix 5.2 • ibm aix 5.3 • ibm aix 6.1

Related

Weakness · not in database (1)

References