CVE-2008-2515: Unspecified vulnerability in iostat in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via unknown vectors related to an "environment variable handling error."

Unscored severity · published Jun 2, 2008

CVE-2008-2515

Unspecified vulnerability in iostat in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via unknown vectors related to an "environment variable handling error."

–

CVSS

0.4%

EPSS

On KEV

Exploitation

Is it being used?

Exploit prediction (EPSS)0.4% · higher than 30% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Aix · Ibm

5.2; 5.3; 6.1 · source: NVD

Affected product

Aix

Ibm

All Aix CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2008-2515

CVE.org

https://www.cve.org/CVERecord?id=CVE-2008-2515

Vendor Advisory

http://aix.software.ibm.com/aix/efixes/security/iostat_advisory.asc

Vendor Advisory

http://secunia.com/advisories/30349

securitytracker.com

http://securitytracker.com/id?1020085

Patch

http://www.ibm.com/support/docview.wss?uid=isg1IZ20635

Patch

http://www.ibm.com/support/docview.wss?uid=isg1IZ21506

Patch

http://www.ibm.com/support/docview.wss?uid=isg1IZ22349