Buffer overflow in IBM Aix

CVE-2010-3405

Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, and earlier allows local users to leverage system group membership and gain privileges via unspecified vectors.

Vulnerability class: Buffer Overflow

EPSS: 0.004 (35.5th percentile) — read the EPSS interpretation.

Affected products

  • Ibm Aix — versions 5.3, 6.1
  • Ibm Vios — versions 1.5, 2.1
  • N/a — versions n/a

Weakness classification (CWE)

References

  • cve@mitre.org (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
  • cve@mitre.org (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
  • cve@mitre.org (Third Party Advisory, vdb-entry, x_refsource_VUPEN)
  • cve@mitre.org (signature, x_refsource_OVAL, Third Party Advisory, vdb-entry)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
  • cve@mitre.org (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
  • cve@mitre.org (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
  • cve@mitre.org (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
  • cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)