7.2high
CVE-2008-0584
Multiple buffer overflows in bos.rte.control in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to…
Published 18 y ago · modified 4 mo ago · JSON
CVSS
7.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 32%
Public exploits
0
none known
Summary
Multiple buffer overflows in bos.rte.control in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to the (1) swap, (2) swapoff, and (3) swapon programs.
Exploit prediction (EPSS)
0.37% probability of exploitation in the next 30 days, higher than 32% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
- CWE-264 Permissions, Privileges, and Access Controls
References
- secunia.com /advisories/28609 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- securityfocus.com /bid/27432 · vdb-entry, x_refsource_BID, x_transferred
- ibm.com /support/docview.wss?uid=isg1IY96095 · vendor-advisory, x_refsource_AIXAPAR, x_transferred
- www14.software.ibm.com /webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4064 · x_refsource_CONFIRM, x_transferred
- vupen.com /english/advisories/2008/0261 · vdb-entry, x_refsource_VUPEN, x_transferred
- oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5744 · vdb-entry, signature, x_refsource_OVAL, x_transferred
- ibm.com /support/docview.wss?uid=isg1IY96101 · vendor-advisory, x_refsource_AIXAPAR, x_transferred
Sources
- CVE List: CVE-2008-0584
- NVD: CVE-2008-0584
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.