CVE-2008-2709: IBM OS 400

Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days.

Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 allows local users to cause a denial of service (task halt and main storage dump) via unspecified vectors involving the running of diagnostics on a modem port. NOTE: there might be limited attack scenarios.

Affected products

• IBM OS 400: version v5r4m0 only; version v5r4m5 only; version v6r1m0 only

Published 2008-06-16. Last modified 2026-06-16.