« Volver al listado

CVE-2008-3248

Estado: ModificadaMedia (4.6)—

qiomkfile in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, does not initialize filesystem blocks during creation of a file, which allows local users to obtain sensitive information by creating and then reading files.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Symantec — Veritas File System

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-3248",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:S/C:C/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.1,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-10-21T18:00:00.960",
  "references": [
    {
      "url": "http://secunia.com/advisories/32332",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seer.entsupport.symantec.com/docs/310872.htm",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.security-objectives.com/advisories/SECOBJADV-2008-04.txt",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.security-objectives.com/advisories/SECOBJSADV-2008-04.txt",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/497626/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/31678",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1021074",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.symantec.com/avcenter/security/Content/2008.10.20.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/2875",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46008",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/32332",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seer.entsupport.symantec.com/docs/310872.htm",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.security-objectives.com/advisories/SECOBJADV-2008-04.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.security-objectives.com/advisories/SECOBJSADV-2008-04.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/497626/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/31678",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1021074",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.symantec.com/avcenter/security/Content/2008.10.20.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/2875",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46008",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "qiomkfile in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, does not initialize filesystem blocks during creation of a file, which allows local users to obtain sensitive information by creating and then reading files."
    },
    {
      "lang": "es",
      "value": "qiomkfile en el  Quick I/O  para la base de datos en Symantec Veritas File System (VxFS) sobre HP-UX, y anterior a la v5.0 MP3 sobre Solaris, Linux, y AIX, no inicializa el bloque de ficheros durante la creación de un archivo, lo que permite obtener información sensible mediante la creación y lectura de archivos."
    }
  ],
  "lastModified": "2026-06-16T22:55:27.740",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:symantec:veritas_file_system:5.0:mp2:aix:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D696B174-AF11-4E36-BDC8-DF5EB6668303"
            },
            {
              "criteria": "cpe:2.3:a:symantec:veritas_file_system:5.0:mp2:linux:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5E082D12-5E75-4CC2-B43C-84CE91063C5D"
            },
            {
              "criteria": "cpe:2.3:a:symantec:veritas_file_system:5.0:mp2:solaris:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3907B274-DCB7-43D2-ADE8-0DFCC536AD34"
            },
            {
              "criteria": "cpe:2.3:a:symantec:veritas_file_system:unknown:unknown:hp-ux:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "896CACC1-541E-45C0-8A3E-E8198892BC64"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}