CVEvulnerability
CVE-2008-1601
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-03-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the reboot program on IBM AIX 5.2 and 5.3 allows local users in the shutdown group to gain privileges.
Affected configurations
• ibm aix 5.2
• ibm aix 5.3
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/29347 secunia.com
- http://securitytracker.com/id?1019602 securitytracker.com
- http://www.ibm.com/support/docview.wss?uid=isg1IZ15479 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IZ15480 www.ibm.com
- http://www.vupen.com/english/advisories/2008/0865 www.vupen.com
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4162 www14.software.ibm.com
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4163 www14.software.ibm.com
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4164 www14.software.ibm.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5497 oval.cisecurity.org
- http://secunia.com/advisories/29347 secunia.com
- http://securitytracker.com/id?1019602 securitytracker.com
- http://www.ibm.com/support/docview.wss?uid=isg1IZ15479 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=isg1IZ15480 www.ibm.com
- http://www.vupen.com/english/advisories/2008/0865 www.vupen.com
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4162 www14.software.ibm.com
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4163 www14.software.ibm.com
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4164 www14.software.ibm.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5497 oval.cisecurity.org