NVD

Id
1542  
Name
CVE-2008-1599  
Description
The nddstat programs on IBM AIX 5.2, 5.3, and 6.1 do not properly handle environment variables, which allows local users to gain privileges by invoking (1) atmstat, (2) entstat, (3) fddistat, (4) hdlcstat, or (5) tokstat.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-03-31  
Modified Date
2011-03-07  
Seq
2008-1599  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
10002 1542 CVE-2008-1599 oval:org.mitre.oval:def:5468  View
10003 1542 CVE-2008-1599 1019604  View
10004 1542 CVE-2008-1599 IZ16975  View
10005 1542 CVE-2008-1599 IZ16991  View
10006 1542 CVE-2008-1599 IZ17058  View
10007 1542 CVE-2008-1599 IZ17059  View
10008 1542 CVE-2008-1599 ADV-2008-0865  View
10009 1542 CVE-2008-1599 http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4156  View
10010 1542 CVE-2008-1599 http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4157  View
10011 1542 CVE-2008-1599 http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4158  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45948 JVNDB-2008-001258 IBM AIX の複数の nddstat プログラム群における権限昇格の脆弱性 IBM AIX の以下の nddstat プログラム群には、環境変数の取り扱いに不備があるために権限昇格の脆弱性が存在します。 CVE-2008-1599 31712 CVE-2008-1599 1542 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001258.html 2008-03-11 2008-04-22 View