CVE-2008-2515

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-06-02 · updated 2026-06-16
Weakness: CWE-264

Description

Unspecified vulnerability in iostat in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via unknown vectors related to an "environment variable handling error."

Affected products

IBM AIX: 5.2, 5.3, 6.1

References

http://aix.software.ibm.com/aix/efixes/security/iostat_advisory.asc
http://secunia.com/advisories/30349
http://securitytracker.com/id?1020085
http://www.ibm.com/support/docview.wss?uid=isg1IZ20635
http://www.ibm.com/support/docview.wss?uid=isg1IZ21506
http://www.ibm.com/support/docview.wss?uid=isg1IZ22349
http://www.ibm.com/support/docview.wss?uid=isg1IZ22350
http://www.ibm.com/support/docview.wss?uid=isg1IZ22351
http://www.securityfocus.com/bid/29325
http://www.vupen.com/english/advisories/2008/1626/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42579
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5424

Get alerted when CVE-2008-2515 or the next vulnerability affects your stack