CVE-2008-1595: Medium severity ibm aix vulnerability

Published Mar 31, 2008

Updated

The proc filesystem in the kernel in IBM AIX 5.2 and 5.3 does not properly enforce directory permissions when a file executing from a directory has weaker permissions than the directory itself, which allows local users to obtain sensitive information.

Affected Software

3 affected components

IBM AIX=5.3

IBM AIX=5.2

IBM AIX=6.1

Remediation

Patch Available

http://www.securityfocus.com/bid/28467

Event History

Mar 31, 2008

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-1595?

CVE-2008-1595 is considered a high severity vulnerability due to its potential for compromising sensitive information.

How do I fix CVE-2008-1595?

To mitigate CVE-2008-1595, ensure proper directory and file permission settings are enforced on the affected systems.

Who is affected by CVE-2008-1595?

CVE-2008-1595 affects IBM AIX versions 5.2, 5.3, and potentially 6.1 based on kernel configurations.

What type of vulnerability is CVE-2008-1595?

CVE-2008-1595 is a local privilege escalation vulnerability within the proc filesystem of the IBM AIX operating system.

Can CVE-2008-1595 be exploited remotely?

No, CVE-2008-1595 requires local access for exploitation, making it a local security vulnerability.