CVE-2009-0536
at in bos.rte.cron on IBM AIX 5.2.0, 5.3.0 through 5.3.9, and 6.1.0 through 6.1.2 allows local...
at in bos.rte.cron on IBM AIX 5.2.0, 5.3.0 through 5.3.9, and 6.1.0 through 6.1.2 allows local users to read arbitrary files via unspecified vectors, related to failure to drop root privileges.
Exploit likelihood
What each source reports
NVD Score used
4.9
at in bos.rte.cron on IBM AIX 5.2.0, 5.3.0 through 5.3.9, and 6.1.0 through 6.1.2 allows local users to read arbitrary files via unspecified vectors, related to failure to drop root privileges.
- Record
CVE-2009-0536- CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:C/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
at in bos.rte.cron on IBM AIX 5.2.0, 5.3.0 through 5.3.9, and 6.1.0 through 6.1.2 allows local users to read arbitrary files via unspecified vectors, related to failure to drop root privileges.
- Record
CVE-2009-0536- Updated
- 2026-11-02
EUVDEUVD-2009-0540 No score
at in bos.rte.cron on IBM AIX 5.2.0, 5.3.0 through 5.3.9, and 6.1.0 through 6.1.2 allows local users to read arbitrary files via unspecified vectors, related to failure to drop root privileges.
- Record
EUVD-2009-0540- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xjpq-q5j9-jvwc No score
at in bos.rte.cron on IBM AIX 5.2.0, 5.3.0 through 5.3.9, and 6.1.0 through 6.1.2 allows local...
at in bos.rte.cron on IBM AIX 5.2.0, 5.3.0 through 5.3.9, and 6.1.0 through 6.1.2 allows local users to read arbitrary files via unspecified vectors, related to failure to drop root privileges.
- Record
GHSA-xjpq-q5j9-jvwc- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-0536 is a medium vulnerability (CVSS 4.9) in Ibm Aix, published February 11, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.50%, the 42nd percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6155
ibm.com/support/docview.wss?uid=isg1IZ43452
ibm.com/support/docview.wss?uid=isg1IZ43459
osvdb.org/51952
aix.software.ibm.com/aix/efixes/security/at_advisory.asc
ibm.com/support/docview.wss?uid=isg1IZ43456
Show 13 moreShow less
securitytracker.com/id?1021704
www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4558
securityfocus.com/bid/33730
vupen.com/english/advisories/2009/0405
ibm.com/support/docview.wss?uid=isg1IZ43453
ibm.com/support/docview.wss?uid=isg1IZ43455
ibm.com/support/docview.wss?uid=isg1IZ43454
exchange.xforce.ibmcloud.com/vulnerabilities/48660
ibm.com/support/docview.wss?uid=isg1IZ43458
secunia.com/advisories/33915
ibm.com/support/docview.wss?uid=isg1IZ43457
nvd.nist.gov/vuln/detail/CVE-2009-0536
github.com/advisories/GHSA-xjpq-q5j9-jvwc