CVE-2008-1599

Published: Mar 31, 2008Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

The nddstat programs on IBM AIX 5.2, 5.3, and 6.1 do not properly handle environment variables, which allows local users to gain privileges by invoking (1) atmstat, (2) entstat, (3) fddistat, (4) hdlcstat, or (5) tokstat.

Affected (3)

Products: Ibm: Aix

Ibm

1 product

Aix

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	Version 5.2
Ibm Aix	Version 5.3
Ibm Aix	Version 6.1

Related CWEs

CWE-264

References (20)

http://securitytracker.com/id?1019604

Source: cve@mitre.org

http://www.ibm.com/support/docview.wss?uid=isg1IZ16975

Source: cve@mitre.org

Patch

http://www.ibm.com/support/docview.wss?uid=isg1IZ16991

Source: cve@mitre.org

Patch

http://www.ibm.com/support/docview.wss?uid=isg1IZ17058

Source: cve@mitre.org

Patch

http://www.ibm.com/support/docview.wss?uid=isg1IZ17059

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2008/0865

Source: cve@mitre.org

http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4156

Source: cve@mitre.org

http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4157

Source: cve@mitre.org

http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4158

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5468

Source: cve@mitre.org

http://securitytracker.com/id?1019604