CVE-2008-2709: Buffer Overflow

Published Jun 16, 2008

Updated

Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 allows local users to cause a denial of service (task halt and main storage dump) via unspecified vectors involving the running of diagnostics on a modem port. NOTE: there might be limited attack scenarios.

Affected Software

3 affected components

IBM Os 400=v6r1m0

IBM Os 400=v5r4m5

IBM Os 400=v5r4m0

Event History

Jun 16, 2008

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2709?

CVE-2008-2709 is classified as a vulnerability that can lead to denial of service conditions.

How do I fix CVE-2008-2709?

To mitigate CVE-2008-2709, ensure your IBM OS/400 is updated to versions that have addressed this flaw.

Who is affected by CVE-2008-2709?

Local users of IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 are at risk due to this vulnerability.

What type of attack is possible with CVE-2008-2709?

CVE-2008-2709 allows for a buffer overflow attack that can result in task halts and main storage dumps.

What are the affected software versions for CVE-2008-2709?

The affected versions include IBM OS/400 V5R4M0, V5R4M5, and V6R1M0.