Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2008-1595

EPSS 0.05% · P14
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2008-1595

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The proc filesystem in the kernel in IBM AIX 5.2 and 5.3 does not properly enforce directory permissions when a file executing from a directory has weaker permissions than the directory itself, which allows local users to obtain sensitive information.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
IBM AIX 内核roc filesystem 敏感信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM AIX(Advanced Interactive eXecutive)是IBM开发的一套商业性质UNIX操作系统，也可称为 AIX。它符合Open group的UNIX 98行业标准。 当一个来自目录的文件执行带有比目录本身更弱的许可时，IBM AIX 5.2和5.3版本的内核中的proc filesystem，没有正确的执行目录许可，这使得本地用户可以获得敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2008-1595

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-1595

Please Login to view more intelligence information

Same Patch Batch · n/a · 2008-03-31 · 37 CVEs total

CVE-2008-1551RunCMS 'viewcat.php' SQL注入漏洞
CVE-2008-1567phpMyAdmin Session文件本地信息泄露漏洞
CVE-2008-1568Comix 'filename' 远程指令执行漏洞
CVE-2008-1569policyd-weight socket不安全临时文件创建漏洞
CVE-2008-1570Policyd-weight create_lockpath函数 竞争条件错误漏洞
CVE-2008-0070Orb Networks Orb RPC请求远程整数溢出漏洞
CVE-2008-1548Aeries Browser Interface 多个跨站脚本攻击漏洞
CVE-2008-1549Aeries Browser Interface 多个SQL注入漏洞
CVE-2008-1550CubeCart index.php多个跨站脚本攻击漏洞
CVE-2008-1566ManageEngine Applications Manager 'Search.do' 跨站脚本攻击漏洞
CVE-2008-1552SILC客户端及服务器密钥协商远程整数溢出漏洞
CVE-2008-1553TopperMod 'mod.php' 目录遍历漏洞
CVE-2008-1554TopperMod 'localita'参数 SQL注入漏洞
CVE-2008-1555BolinOS 'gbincluder.php' 目录遍历漏洞
CVE-2008-1556BolinOS 多个跨站脚本攻击漏洞
CVE-2008-1557BolinOS 'gBphpInfo.php' 信息泄露漏洞
CVE-2008-1558MPlayer 'sdpplin.c' sdpplin_parse()函数 整数溢出漏洞
CVE-2008-1559Joomla!Mambo Alphacontent 组件 'id'参数 SQL注入漏洞
CVE-2008-1599IBM AIX nddstat程序权限许可和访问控制漏洞
CVE-2008-0706HP Compaq Notebook PC BIOS 未明本地未授权访问漏洞

Showing top 20 of 37 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2008-1595

No comments yet

Leave a comment