CVE-2010-3405: Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, a...

Security readout for executives and security teams

This is a local privilege-escalation issue in IBM AIX and VIOS support tooling. A user already on the host, with system group membership, could use a buffer overflow in sa_snap to gain higher privileges. It is not described as remotely exploitable, but it matters on shared or administratively delegated AIX systems. Exposure is likely limited to legacy IBM AIX or VIOS hosts with the bos.esagent fileset and users in the system group. Internet-facing exposure is not indicated. The main concern is post-login privilege escalation on older Unix infrastructure or virtualization management hosts. Treat this as a legacy infrastructure hardening item with privilege-escalation impact. It is not evidenced as remotely exploitable or actively exploited, but affected AIX or VIOS systems often support critical workloads and should be patched or access-restricted. Mitigation focus: Review IBM APARs and the sa_snap advisory for applicable fixes.; Patch affected AIX and VIOS systems according to IBM guidance.; Restrict system group membership to administrators with a current business need..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.