CVE-2008-5035

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-11-10 · updated 2026-06-16
Weakness: CWE-399

Description

The Resource Monitoring and Control (RMC) daemon in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 and 3.3.0 SP2 allows remote attackers to cause a denial of service (daemon crash or hang) via a packet with an invalid length.

Affected products

IBM Hardware Management Console - Power Systems: 3.2.0-sp1, 3.3.0-sp2

References

http://secunia.com/advisories/32571
http://www-1.ibm.com/support/docview.wss?uid=isg1MB02482
http://www-1.ibm.com/support/docview.wss?uid=isg1MB02485
http://www.securityfocus.com/bid/32181
http://www.vupen.com/english/advisories/2008/3051
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4441
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4442
https://exchange.xforce.ibmcloud.com/vulnerabilities/46413
https://www14.software.ibm.com/webapp/set2/sas/f/hmc/power6/install/v7.Readme.html#MH01133
https://www14.software.ibm.com/webapp/set2/sas/f/hmc/power6/install/v7.Readme.html#MH01134
http://secunia.com/advisories/32571
http://www-1.ibm.com/support/docview.wss?uid=isg1MB02482

Get alerted when CVE-2008-5035 or the next vulnerability affects your stack