CVE-2008-5387: Buffer Overflow
Published Dec 9, 2008
·Updated
Buffer overflow in autoconf6 in IBM AIX 6.1.0 through 6.1.2, when Role-Based Access Control is enabled, allows local users with aix.network.config.tcpip authorization to gain privileges via unspecified vectors.
Affected Software
3 affected components
IBM AIX=6.1.1
IBM AIX=6.1
IBM AIX=6.1.2
Remediation
Patch Available
Patch Available
Patch Available
Event History
Dec 9, 2008
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-5387?
CVE-2008-5387 is considered to have high severity due to the potential for privilege escalation.
2
How do I fix CVE-2008-5387?
To fix CVE-2008-5387, you should apply the appropriate patches provided by IBM for AIX versions 6.1.0, 6.1.1, and 6.1.2.
3
Who is affected by CVE-2008-5387?
Local users with aix.network.config.tcpip authorization on IBM AIX versions 6.1.0 through 6.1.2 are affected by CVE-2008-5387.
4
What can attackers exploit in CVE-2008-5387?
CVE-2008-5387 allows attackers to exploit a buffer overflow to gain elevated privileges.
5
Is CVE-2008-5387 related to Role-Based Access Control?
Yes, CVE-2008-5387 is specifically mentioned in the context of Role-Based Access Control being enabled.