CVE-2008-2515

high

Description

Unspecified vulnerability in iostat in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via unknown vectors related to an "environment variable handling error."

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5424

https://exchange.xforce.ibmcloud.com/vulnerabilities/42579

http://www.vupen.com/english/advisories/2008/1626/references

http://www.securityfocus.com/bid/29325

http://www.ibm.com/support/docview.wss?uid=isg1IZ22351

http://www.ibm.com/support/docview.wss?uid=isg1IZ22350

http://www.ibm.com/support/docview.wss?uid=isg1IZ22349

http://www.ibm.com/support/docview.wss?uid=isg1IZ21506

http://www.ibm.com/support/docview.wss?uid=isg1IZ20635

http://securitytracker.com/id?1020085

http://secunia.com/advisories/30349

http://aix.software.ibm.com/aix/efixes/security/iostat_advisory.asc

Details

Source: Mitre, NVD

Published: 2008-06-02

Updated: 2025-04-09

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H