Unscored severity · published Sep 16, 2010
CVE-2010-3405
Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, and earlier allows local users to leverage system group membership and…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, and earlier allows local users to leverage system group membership and gain privileges via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 37% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3405
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3405
Patch
http://aix.software.ibm.com/aix/efixes/security/sa_snap_advisory.asc
Third Party Advisory
http://secunia.com/advisories/41446
Third Party Advisory
http://securitytracker.com/id?1024430
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IZ81819
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IZ82245
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IZ82630
More from Aix
10.0
CVE-2024-56346
IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls
9.9
CVE-2026-18835
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-16816
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-15068
Vulnerabilities in IBM AIX and PowerVM VIOS
9.8
CVE-2026-19437
Vulnerabilities in IBM AIX and PowerVM VIOS
