VulnerabilityModified
CVE-2009-0536
at in bos.rte.cron on IBM AIX 5.2.0, 5.3.0 through 5.3.9, and 6.1.0 through 6.1.2 allows local users to read arbitrary files via unspecified vectors, related to failure to drop root privileges.
MEDIUM 4.9EPSS 0.50%
Does this matter?
Lower severity and a low EPSS score (0.50%). Track it; it rarely justifies an emergency change on its own.
Description
at in bos.rte.cron on IBM AIX 5.2.0, 5.3.0 through 5.3.9, and 6.1.0 through 6.1.2 allows local users to read arbitrary files via unspecified vectors, related to failure to drop root privileges.
- CVSS 2.0
- 4.9 MEDIUMAV:L/AC:L/Au:N/C:C/I:N/A:N
- EPSS
- 0.50% probability · 41th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- ibm/aix
- Source
- cve@mitre.org
References
- http://aix.software.ibm.com/aix/efixes/security/at_advisory.ascExploit, Patch, Vendor Advisory
- http://osvdb.org/51952
- http://secunia.com/advisories/33915
- http://www.ibm.com/support/docview.wss?uid=isg1IZ43452Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ43453Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ43454Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ43455Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ43456Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ43457Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ43458Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ43459Vendor Advisory
- http://www.securityfocus.com/bid/33730Patch
- http://www.securitytracker.com/id?1021704
- http://www.vupen.com/english/advisories/2009/0405
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4558Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48660
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6155
- http://aix.software.ibm.com/aix/efixes/security/at_advisory.ascExploit, Patch, Vendor Advisory
- http://osvdb.org/51952
- http://secunia.com/advisories/33915
- http://www.ibm.com/support/docview.wss?uid=isg1IZ43452Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ43453Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ43454Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ43455Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ43456Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ43457Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ43458Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=isg1IZ43459Vendor Advisory
- http://www.securityfocus.com/bid/33730Patch
- http://www.securitytracker.com/id?1021704
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.