Unscored severity · published Mar 31, 2008
CVE-2008-1599
The nddstat programs on IBM AIX 5.2, 5.3, and 6.1 do not properly handle environment variables, which allows local users to gain privileges by invoking (1) atmstat, (2) entstat,…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The nddstat programs on IBM AIX 5.2, 5.3, and 6.1 do not properly handle environment variables, which allows local users to gain privileges by invoking (1) atmstat, (2) entstat, (3) fddistat, (4) hdlcstat, or (5) tokstat.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
Aix · Ibm
5.2; 5.3; 6.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1599
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1599
securitytracker.com
http://securitytracker.com/id?1019604
Patch
http://www.ibm.com/support/docview.wss?uid=isg1IZ16975
Patch
http://www.ibm.com/support/docview.wss?uid=isg1IZ16991
Patch
http://www.ibm.com/support/docview.wss?uid=isg1IZ17058
Patch
http://www.ibm.com/support/docview.wss?uid=isg1IZ17059
www.vupen.com
http://www.vupen.com/english/advisories/2008/0865
More from Aix
10.0
CVE-2024-56346
IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls
9.9
CVE-2026-18835
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-16816
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-15068
Vulnerabilities in IBM AIX and PowerVM VIOS
9.8
CVE-2026-19437
Vulnerabilities in IBM AIX and PowerVM VIOS