Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2008-1593 | First vendor Publication | 2008-03-31 |
| Vendor | Cve | Last vendor Modification | 2017-09-29 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 7.2 | Attack Range | Local |
| Cvss Impact Score | 10 | Attack Complexity | Low |
| Cvss Expoit Score | 3.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| The checkpoint and restart feature in the kernel in IBM AIX 5.2, 5.3, and 6.1 does not properly protect kernel memory, which allows local users to read and modify portions of memory and gain privileges via unspecified vectors involving a restart of a 64-bit process, probably related to the as_getadsp64 function. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1593 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-264 | Permissions, Privileges, and Access Controls |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:4595 | |||
| Oval ID: | oval:org.mitre.oval:def:4595 | ||
| Title: | IBM AIX Kernel Bugs Let Local Users Execute Arbitrary Code, Access Data, and Deny Service | ||
| Description: | The checkpoint and restart feature in the kernel in IBM AIX 5.2, 5.3, and 6.1 does not properly protect kernel memory, which allows local users to read and modify portions of memory and gain privileges via unspecified vectors involving a restart of a 64-bit process, probably related to the as_getadsp64 function. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2008-1593 | Version: | 2 |
| Platform(s): | IBM AIX 5.2 IBM AIX 5.3 IBM AIX 6.1 | Product(s): | |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Os | 3 |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 43123 | IBM AIX Kernel 64-bit Process Restart Memory Access Arbitrary Code Execution |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2013-01-30 | Name : The remote AIX host is missing a security patch. File : aix_IZ11820.nasl - Type : ACT_GATHER_INFO |
| 2013-01-30 | Name : The remote AIX host is missing a security patch. File : aix_IZ16992.nasl - Type : ACT_GATHER_INFO |
| 2013-01-30 | Name : The remote AIX host is missing a security patch. File : aix_IZ17111.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2021-05-04 12:07:21 |
|
| 2021-04-22 01:07:46 |
|
| 2020-05-23 00:21:31 |
|
| 2017-09-29 09:23:29 |
|
| 2016-04-26 17:16:32 |
|
| 2014-02-17 10:44:30 |
|
| 2013-05-11 00:14:00 |
|
