{"id":"CVE-2010-3405","aliases":["EUVD-2010-3403","GHSA-5f46-2wpv-265h"],"status":"published","title":"Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2...","description":"Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, and earlier allows local users to leverage system group membership and gain privileges via unspecified vectors.","severity":{"version":"2.0","score":6.8,"vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00433,"percentile":0.37881,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2010-09-16T20:00:00Z","modified":"2026-06-16T23:22:42Z","products":[{"vendor":"ibm","product":"aix"},{"vendor":"ibm","product":"vios"}],"references":[{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ82245","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred","Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ83942","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2377","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12214","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/43207","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ84167","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred","Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ81819","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/61774","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ82630","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/41446","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ83909","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred","Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ83975","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1024430","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://aix.software.ibm.com/aix/efixes/security/sa_snap_advisory.asc","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3405"},{"url":"https://github.com/advisories/GHSA-5f46-2wpv-265h"}],"sources":{"cve":[{"id":"CVE-2010-3405","description":"Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, and earlier allows local users to leverage system group membership and gain privileges via unspecified vectors.","status":"published","published":"2010-09-16T20:00:00Z","modified":"2024-08-07T03:11:43.776Z","updated_at":"2026-11-02T14:33:28.115387Z"}],"euvd":[{"id":"EUVD-2010-3403","description":"Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, and earlier allows local users to leverage system group membership and gain privileges via unspecified vectors.","status":"published","published":"2010-09-16T20:00:00Z","modified":"2024-08-07T03:11:43Z","updated_at":"2026-11-03T01:39:34.48505Z"}],"ghsa":[{"id":"GHSA-5f46-2wpv-265h","title":"Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2...","description":"Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, and earlier allows local users to leverage system group membership and gain privileges via unspecified vectors.","status":"published","published":"2022-05-14T01:55:59Z","modified":"2023-02-02T05:04:34Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:51:54.365671Z"}],"nvd":[{"id":"CVE-2010-3405","description":"Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, and earlier allows local users to leverage system group membership and gain privileges via unspecified vectors.","status":"published","published":"2010-09-16T21:00:01.607Z","modified":"2026-06-16T23:22:42.567Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:52.227027Z"}]}}