Buffer Overflow in IBM OS/400 RCHMGR Module

CVE-2008-2709

Summary

A buffer overflow vulnerability exists in the RCHMGR module of IBM OS/400, affecting versions V5R4M0, V5R4M5, and V6R1M0. This flaw allows local users to execute specific operations that lead to a denial of service. By running diagnostics on a modem port, an attacker could trigger a halt of the task and create a storage dump, which disrupts the normal operation of the affected system. Attack vectors remain unspecified, and while the scenario for exploitation may be limited, the potential impact on system availability is notable.

References