CVE-2008-5384: crontab in bos.rte.cron in IBM AIX 6.1.0 through 6.1.2 allows local users with aix.system.config.cron autho...

Security readout for executives and security teams

CVE-2008-5384 is a local privilege escalation issue in IBM AIX 6.1 crontab handling. A local user who already has aix.system.config.cron authorization could gain higher privileges through editor launch behavior. This is not a remote internet-facing issue, but it matters on shared or multi-user AIX systems. Exposure is likely limited to legacy IBM AIX 6.1.0 through 6.1.2 systems where local accounts or roles have aix.system.config.cron authorization. Systems without affected AIX levels, without local user access, or without that authorization appear less exposed based on the provided sources. Treat this as a targeted legacy-platform risk, not an internet-scale emergency. Prioritize if the organization still runs AIX 6.1, especially shared systems with delegated cron administration. Otherwise, track through normal legacy asset and patch governance. Mitigation focus: Identify any IBM AIX 6.1.0 through 6.1.2 systems.; Review IBM APARs and the AIX 6.1 security advisory for vendor fixes.; Restrict aix.system.config.cron authorization to trusted administrators only..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.