CVEvulnerability
CVE-2010-3405
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-09-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:L/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, and earlier allows local users to leverage system group membership and gain privileges via unspecified vectors.
Affected configurations
• ibm aix 5.3
• ibm aix 6.1
• ibm vios 1.5
• ibm vios 2.1
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://aix.software.ibm.com/aix/efixes/security/sa_snap_advisory.asc Patch, Vendor Advisory
- http://secunia.com/advisories/41446 Third Party Advisory
- http://securitytracker.com/id?1024430 Third Party Advisory, VDB Entry
- http://www.ibm.com/support/docview.wss?uid=isg1IZ81819 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ82245 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ82630 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ83909 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ83942 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ83975 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ84167 Vendor Advisory
- http://www.securityfocus.com/bid/43207 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2010/2377 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61774 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12214 Third Party Advisory
- http://aix.software.ibm.com/aix/efixes/security/sa_snap_advisory.asc Patch, Vendor Advisory
- http://secunia.com/advisories/41446 Third Party Advisory
- http://securitytracker.com/id?1024430 Third Party Advisory, VDB Entry
- http://www.ibm.com/support/docview.wss?uid=isg1IZ81819 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ82245 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ82630 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ83909 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ83942 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ83975 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ84167 Vendor Advisory
- http://www.securityfocus.com/bid/43207 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2010/2377 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61774 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12214 Third Party Advisory