Back to search
CVE-2008-3248
Published: Oct 21, 2008
Modified: Aug 7, 2024
PUBLISHED
Description
qiomkfile in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, does not initialize filesystem blocks during creation of a file, which allows local users to obtain sensitive information by creating and then reading files.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
32332
third-party-advisory
x_refsource_SECUNIA
1021074
vdb-entry
x_refsource_SECTRACK
31678
vdb-entry
x_refsource_BID
http://seer.entsupport.symantec.com/docs/310872.htm
x_refsource_CONFIRM
20081021 SECOBJADV-2008-04: Symantec Veritas Storage Foundation Memory Disclosure Vulnerability
mailing-list
x_refsource_BUGTRAQ
symantec-vxfs-qiomkfile-info-disclosure(46008)
vdb-entry
x_refsource_XF
http://www.symantec.com/avcenter/security/Content/2008.10.20.html
x_refsource_CONFIRM
ADV-2008-2875
vdb-entry
x_refsource_VUPEN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now