Total
626 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2005-3060 | 1 Ibm | 1 Aix | 2017-07-10 | 7.2 HIGH | N/A |
Buffer overflow in getconf in IBM AIX 5.2 to 5.3 allows local users to execute arbitrary code via unknown vectors. | |||||
CVE-2005-3749 | 1 Ibm | 1 Aix | 2017-07-10 | 7.2 HIGH | N/A |
Unspecified "absolute path vulnerabilities" in the diagela command (diagela.sh) in IBM AIX 5.2 and 5.3 have unknown impact and attack vectors. | |||||
CVE-2005-0240 | 1 Ibm | 1 Aix | 2017-07-10 | 7.2 HIGH | N/A |
Format string vulnerability in chdev on IBM AIX 5.2 allows local users to execute arbitrary code via format string specifiers in a command line argument, which is not properly handled when printing an error message. | |||||
CVE-2005-1176 | 1 Ibm | 1 Aix | 2017-07-10 | 1.2 LOW | N/A |
Race condition in JFS2 on AIX 5.2 and 5.3, when deleting a file while I/O is still occurring for that file, may write data to a different file, which could leak sensitive information. | |||||
CVE-2005-0263 | 1 Ibm | 1 Aix | 2017-07-10 | 7.2 HIGH | N/A |
Buffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -O argument. | |||||
CVE-2005-0262 | 1 Ibm | 1 Aix | 2017-07-10 | 7.2 HIGH | N/A |
Buffer overflow in ipl_varyon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -d argument. | |||||
CVE-2005-0261 | 1 Ibm | 1 Aix | 2017-07-10 | 2.1 LOW | N/A |
lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which allows local users to read one line of arbitrary files. | |||||
CVE-2005-0250 | 1 Ibm | 1 Aix | 2017-07-10 | 7.2 HIGH | N/A |
Format string vulnerability in auditselect on IBM AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via format string specifiers in a command line argument. | |||||
CVE-2004-2312 | 1 Ibm | 1 Aix | 2017-07-10 | 7.2 HIGH | N/A |
Buffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain privileges via a long CC argument. | |||||
CVE-2004-2388 | 1 Ibm | 1 Aix | 2017-07-10 | 10.0 HIGH | N/A |
rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the structure to be overwritten by the authenticate function and assign privileges to the wrong user. | |||||
CVE-2004-0243 | 1 Ibm | 1 Aix | 2017-07-10 | 5.0 MEDIUM | N/A |
AIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if the password is correct, which allows remote attackers to guess the password via brute force methods. | |||||
CVE-2004-1054 | 1 Ibm | 1 Aix | 2017-07-10 | 7.2 HIGH | N/A |
Untrusted execution path vulnerability in invscout in IBM AIX 5.1.0, 5.2.0, and 5.3.0 allows local users to gain privileges by modifying the PATH environment variable to point to a malicious "uname" program, which is executed from lsvpd after lsvpd has been invoked by invscout. | |||||
CVE-2004-1028 | 1 Ibm | 1 Aix | 2017-07-10 | 7.2 HIGH | N/A |
Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious "grep" program, which is executed from chcod. | |||||
CVE-2004-0544 | 1 Ibm | 1 Aix | 2017-07-10 | 7.2 HIGH | N/A |
Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands. | |||||
CVE-2004-0545 | 1 Ibm | 1 Aix | 2017-07-10 | 7.2 HIGH | N/A |
LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack. | |||||
CVE-2004-0828 | 1 Ibm | 1 Aix | 2017-07-10 | 2.1 LOW | N/A |
The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before executing the -f option, which allows local users to modify or create arbitrary files. | |||||
CVE-2004-1330 | 1 Ibm | 1 Aix | 2017-07-10 | 7.2 HIGH | N/A |
Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username. | |||||
CVE-1999-1583 | 1 Ibm | 1 Aix | 2017-07-10 | 7.2 HIGH | N/A |
Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument. | |||||
CVE-2003-0170 | 1 Ibm | 1 Aix | 2017-07-10 | 10.0 HIGH | N/A |
Unknown vulnerability in ftpd in IBM AIX 5.2, when configured to use Kerberos 5 for authentication, allows remote attackers to gain privileges via unknown attack vectors. | |||||
CVE-2003-0696 | 1 Ibm | 1 Aix | 2017-07-10 | 5.0 MEDIUM | N/A |
The getipnodebyname() API in AIX 5.1 and 5.2 does not properly close sockets, which allows attackers to cause a denial of service (resource exhaustion). |