CVE-2008-2515

Unspecified vulnerability in iostat in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via unknown vectors related to an "environment variable handling error."

• CWE-264

• http://aix.software.ibm.com/aix/efixes/security/iostat_advisory.ascVendor Advisory
• http://secunia.com/advisories/30349Vendor Advisory
• http://securitytracker.com/id?1020085
• http://www.ibm.com/support/docview.wss?uid=isg1IZ20635Patch
• http://www.ibm.com/support/docview.wss?uid=isg1IZ21506Patch
• http://www.ibm.com/support/docview.wss?uid=isg1IZ22349Patch
• http://www.ibm.com/support/docview.wss?uid=isg1IZ22350Patch
• http://www.ibm.com/support/docview.wss?uid=isg1IZ22351Patch, Vendor Advisory
• http://www.securityfocus.com/bid/29325Patch
• http://www.vupen.com/english/advisories/2008/1626/referencesVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42579
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5424
• http://aix.software.ibm.com/aix/efixes/security/iostat_advisory.ascVendor Advisory
• http://secunia.com/advisories/30349Vendor Advisory
• http://securitytracker.com/id?1020085
• http://www.ibm.com/support/docview.wss?uid=isg1IZ20635Patch
• http://www.ibm.com/support/docview.wss?uid=isg1IZ21506Patch
• http://www.ibm.com/support/docview.wss?uid=isg1IZ22349Patch
• http://www.ibm.com/support/docview.wss?uid=isg1IZ22350Patch
• http://www.ibm.com/support/docview.wss?uid=isg1IZ22351Patch, Vendor Advisory
• http://www.securityfocus.com/bid/29325Patch
• http://www.vupen.com/english/advisories/2008/1626/referencesVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42579
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5424

Published

Jun 2, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-2509SQL injection vulnerability in pwd.asp in Excuse Online allo…
• CVE-2008-2510SQL injection vulnerability in wp-uploadfile.php in the Uplo…
• CVE-2008-2511Directory traversal vulnerability in the UmxEventCli.CachedA…
• CVE-2008-2512Directory traversal vulnerability in Symantec Backup Exec Sy…
• CVE-2008-2513Buffer overflow in the kernel in IBM AIX 5.2, 5.3, and 6.1 a…
• CVE-2008-2514Buffer overflow in errpt in IBM AIX 5.2, 5.3, and 6.1 allows…
• CVE-2008-2516pam_sm_authenticate in pam_pgsql.c in libpam-pgsql 0.6.3 doe…
• CVE-2008-2517The sarab.sh script in SaraB before 0.2.4 places the dar pro…
• CVE-2008-2518Cross-site scripting (XSS) vulnerability in the advanced sea…
• CVE-2008-2519Directory traversal vulnerability in Core FTP client 2.1 Bui…
• CVE-2008-2520Multiple PHP remote file inclusion vulnerabilities in BigACE…
• CVE-2008-2521SQL injection vulnerability in members.php in YABSoft Mega F…