CVE-2008-4638

Symantec Veritas File System < 5.0 MP3 - Unauthenticated Arbitrary File Read via qioadmin Error Message

Title source: llm
STIX 2.1

Description

qioadmin in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message.

References (7)

Core 7
Core References
Patch, Vendor Advisory x_refsource_confirm
http://seer.entsupport.symantec.com/docs/310872.htm
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/497675/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/46009
Patch, Vendor Advisory x_refsource_confirm
http://www.symantec.com/avcenter/security/Content/2008.10.20.html
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/2875
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/31679

Scores

EPSS 0.0007
EPSS Percentile 20.6%

Details

CWE
CWE-200
Status published
Products (2)
symantec/veritas_file_system 5.0 mp2 (3 CPE variants)
symantec/veritas_file_system unknown unknown
Published Oct 21, 2008
Tracked Since Feb 18, 2026