CVE-2008-1599

Publication date

2008-03-31 23:00:00

Family

mitre

State

PUBLISHED

Description

The nddstat programs on IBM AIX 5.2, 5.3, and 6.1 do not properly handle environment variables, which allows local users to gain privileges by invoking (1) atmstat, (2) entstat, (3) fddistat, (4) hdlcstat, or (5) tokstat.