{"api_version":"1","generated_at":"2026-07-24T18:39:44+00:00","cve":"CVE-2010-3405","urls":{"html":"https://cve.report/CVE-2010-3405","api":"https://cve.report/api/cve/CVE-2010-3405.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-3405","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-3405"},"summary":{"title":"CVE-2010-3405","description":"Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, and earlier allows local users to leverage system group membership and gain privileges via unspecified vectors.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-09-16 21:00:01","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","baseScore":6.8,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ81819","name":"http://www.ibm.com/support/docview.wss?uid=isg1IZ81819","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"IBM notice: The page you requested cannot be displayed","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ83975","name":"http://www.ibm.com/support/docview.wss?uid=isg1IZ83975","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"IBM notice: The page you requested cannot be displayed","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://secunia.com/advisories/41446","name":"http://secunia.com/advisories/41446","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"IBM AIX sa_snap Two Vulnerabilities - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ84167","name":"http://www.ibm.com/support/docview.wss?uid=isg1IZ84167","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"IBM notice: The page you requested cannot be displayed","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ83942","name":"http://www.ibm.com/support/docview.wss?uid=isg1IZ83942","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"IBM notice: The page you requested cannot be displayed","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ82630","name":"http://www.ibm.com/support/docview.wss?uid=isg1IZ82630","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"IBM notice: The page you requested cannot be displayed","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://aix.software.ibm.com/aix/efixes/security/sa_snap_advisory.asc","name":"http://aix.software.ibm.com/aix/efixes/security/sa_snap_advisory.asc","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12214","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12214","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/43207","name":"http://www.securityfocus.com/bid/43207","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"IBM AIX Local Privilege Escalation and Security Bypass Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securitytracker.com/id?1024430","name":"http://securitytracker.com/id?1024430","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"IBM AIX Buffer Overflow in sa_snap Lets Local Users Gain Elevated Privileges - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/61774","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/61774","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ83909","name":"http://www.ibm.com/support/docview.wss?uid=isg1IZ83909","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"IBM notice: The page you requested cannot be displayed","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://www.vupen.com/english/advisories/2010/2377","name":"http://www.vupen.com/english/advisories/2010/2377","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ82245","name":"http://www.ibm.com/support/docview.wss?uid=isg1IZ82245","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"IBM notice: The page you requested cannot be displayed","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-3405","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3405","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"3405","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"ibm","cpe5":"aix","cpe6":"5.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3405","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"ibm","cpe5":"aix","cpe6":"6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3405","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"vios","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3405","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"vios","cpe6":"2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T03:11:43.776Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"IZ82245","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ82245"},{"name":"IZ83942","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ83942"},{"name":"ADV-2010-2377","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/2377"},{"name":"oval:org.mitre.oval:def:12214","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12214"},{"name":"43207","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/43207"},{"name":"IZ84167","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ84167"},{"name":"IZ81819","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ81819"},{"name":"ibm-aix-sasnap-bo(61774)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/61774"},{"name":"IZ82630","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ82630"},{"name":"41446","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/41446"},{"name":"IZ83909","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ83909"},{"name":"IZ83975","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ83975"},{"name":"1024430","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1024430"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://aix.software.ibm.com/aix/efixes/security/sa_snap_advisory.asc"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-09-13T00:00:00.000Z","descriptions":[{"lang":"en","value":"Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, and earlier allows local users to leverage system group membership and gain privileges via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-09-18T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"IZ82245","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ82245"},{"name":"IZ83942","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ83942"},{"name":"ADV-2010-2377","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/2377"},{"name":"oval:org.mitre.oval:def:12214","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12214"},{"name":"43207","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/43207"},{"name":"IZ84167","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ84167"},{"name":"IZ81819","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ81819"},{"name":"ibm-aix-sasnap-bo(61774)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/61774"},{"name":"IZ82630","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ82630"},{"name":"41446","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/41446"},{"name":"IZ83909","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ83909"},{"name":"IZ83975","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ83975"},{"name":"1024430","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1024430"},{"tags":["x_refsource_CONFIRM"],"url":"http://aix.software.ibm.com/aix/efixes/security/sa_snap_advisory.asc"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-3405","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, and earlier allows local users to leverage system group membership and gain privileges via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"IZ82245","refsource":"AIXAPAR","url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ82245"},{"name":"IZ83942","refsource":"AIXAPAR","url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ83942"},{"name":"ADV-2010-2377","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/2377"},{"name":"oval:org.mitre.oval:def:12214","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12214"},{"name":"43207","refsource":"BID","url":"http://www.securityfocus.com/bid/43207"},{"name":"IZ84167","refsource":"AIXAPAR","url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ84167"},{"name":"IZ81819","refsource":"AIXAPAR","url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ81819"},{"name":"ibm-aix-sasnap-bo(61774)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/61774"},{"name":"IZ82630","refsource":"AIXAPAR","url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ82630"},{"name":"41446","refsource":"SECUNIA","url":"http://secunia.com/advisories/41446"},{"name":"IZ83909","refsource":"AIXAPAR","url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ83909"},{"name":"IZ83975","refsource":"AIXAPAR","url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ83975"},{"name":"1024430","refsource":"SECTRACK","url":"http://securitytracker.com/id?1024430"},{"name":"http://aix.software.ibm.com/aix/efixes/security/sa_snap_advisory.asc","refsource":"CONFIRM","url":"http://aix.software.ibm.com/aix/efixes/security/sa_snap_advisory.asc"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2010-3405","datePublished":"2010-09-16T20:00:00.000Z","dateReserved":"2010-09-16T00:00:00.000Z","dateUpdated":"2024-08-07T03:11:43.776Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-09-16 21:00:01","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","baseScore":6.8,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:1.5:*:*:*:*:*:*:*","matchCriteriaId":"DFF79665-519F-46FE-A3AB-41FFAB5429EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A37C3C90-ED84-437F-AE68-57D09BF6999A"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"3405","Ordinal":"1","Title":"CVE-2010-3405","CVE":"CVE-2010-3405","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"3405","Ordinal":"1","NoteData":"Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, and earlier allows local users to leverage system group membership and gain privileges via unspecified vectors.","Type":"Description","Title":"CVE-2010-3405"},{"CveYear":"2010","CveId":"3405","Ordinal":"2","NoteData":"2010-09-16","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"3405","Ordinal":"3","NoteData":"2017-09-18","Type":"Other","Title":"Modified"}]}}}