qiomkfile in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX, and before 5.0 MP3 on Solaris, Linux, and…

Exploit prediction (EPSS)

0.35% probability of exploitation in the next 30 days, higher than 28% of all scored CVEs.

CVSS scores

Classification

Weakness

• CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

• secunia.com /advisories/32332 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• securitytracker.com /id?1021074 · vdb-entry, x_refsource_SECTRACK, x_transferred
• securityfocus.com /bid/31678 · vdb-entry, x_refsource_BID, x_transferred
• seer.entsupport.symantec.com /docs/310872.htm · x_refsource_CONFIRM, x_transferred
• securityfocus.com /archive/1/497626/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
• security-objectives.com /advisories/SECOBJADV-2008-04.txt · x_refsource_MISC, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/46008 · vdb-entry, x_refsource_XF, x_transferred
• symantec.com /avcenter/security/Content/2008.10.20.html · x_refsource_CONFIRM, x_transferred
• security-objectives.com /advisories/SECOBJSADV-2008-04.txt · x_refsource_MISC, x_transferred
• vupen.com /english/advisories/2008/2875 · vdb-entry, x_refsource_VUPEN, x_transferred

Sources

• CVE List: CVE-2008-3248
• NVD: CVE-2008-3248

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.