Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-3248

Опубликовано: 21 окт. 2008
Источник: nvd
CVSS2: 4.6
EPSS Низкий

Описание

qiomkfile in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, does not initialize filesystem blocks during creation of a file, which allows local users to obtain sensitive information by creating and then reading files.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:symantec:veritas_file_system:5.0:mp2:aix:*:*:*:*:*
cpe:2.3:a:symantec:veritas_file_system:5.0:mp2:linux:*:*:*:*:*
cpe:2.3:a:symantec:veritas_file_system:5.0:mp2:solaris:*:*:*:*:*
cpe:2.3:a:symantec:veritas_file_system:unknown:unknown:hp-ux:*:*:*:*:*

EPSS

Процентиль: 20%
0.00064
Низкий

4.6 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

github
почти 4 года назад

qiomkfile in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, does not initialize filesystem blocks during creation of a file, which allows local users to obtain sensitive information by creating and then reading files.

EPSS

Процентиль: 20%
0.00064
Низкий

4.6 Medium

CVSS2

Дефекты

CWE-200