← Database

CVE-2008-1599

HIGH CVSS: 7.2 Published: 2008-03-31 Modified: 2026-06-16

Description

The nddstat programs on IBM AIX 5.2, 5.3, and 6.1 do not properly handle environment variables, which allows local users to gain privileges by invoking (1) atmstat, (2) entstat, (3) fddistat, (4) hdlcstat, or (5) tokstat.

Affected Platforms

Ibm Aix

Weakness Type

CWE-264

References