NVD

Id
3131  
Name
CVE-2008-3248  
Description
qiomkfile in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, does not initialize filesystem blocks during creation of a file, which allows local users to obtain sensitive information by creating and then reading files.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.1  
CVSS Vector
(AV:L/AC:L/Au:S/C:C/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-10-21  
Modified Date
2012-10-29  
Seq
2008-3248  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
19873 3131 CVE-2008-3248 http://seer.entsupport.symantec.com/docs/310872.htm  View
19874 3131 CVE-2008-3248 http://www.security-objectives.com/advisories/SECOBJADV-2008-04.txt  View
19875 3131 CVE-2008-3248 http://www.security-objectives.com/advisories/SECOBJSADV-2008-04.txt  View
19876 3131 CVE-2008-3248 20081021 SECOBJADV-2008-04: Symantec Veritas Storage Foundation Memory Disclosure Vulnerability  View
19877 3131 CVE-2008-3248 31678  View
19878 3131 CVE-2008-3248 1021074  View
19879 3131 CVE-2008-3248 http://www.symantec.com/avcenter/security/Content/2008.10.20.html  View
19880 3131 CVE-2008-3248 ADV-2008-2875  View
19881 3131 CVE-2008-3248 symantec-vxfs-qiomkfile-info-disclosure(46008)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47062 JVNDB-2008-002372 Symantec Veritas File System (VxFS) のデータベース用 Quick I/O の qiomkfile コマンドにおける情報漏えいの脆弱性 HP-UX、Solaris、Linux、AIX 上で稼動する Symantec Veritas File System (VxFS) のデータベース用 Quick I/O の qiomkfile コマンドには、ファイル作成時に、作成先のファイルシステムブロックを初期化しないことに起因して、情報が漏えいする脆弱性が存在します。 CVE-2008-3248 33361 CVE-2008-3248 3131 4.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002372.html 2008-10-21 2009-07-08 View