Total
701 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2007-5764 | 1 Ibm | 1 Aix | 2017-09-29 | 7.2 HIGH | N/A |
Buffer overflow in the pioout program in printers.rte in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via a long command line option. | |||||
CVE-2007-4623 | 1 Ibm | 1 Aix | 2017-09-29 | 7.2 HIGH | N/A |
Stack-based buffer overflow in the sendrmt function in bellmail in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via a long parameter to the m command. | |||||
CVE-2007-4513 | 1 Ibm | 1 Aix | 2017-09-29 | 7.2 HIGH | N/A |
Multiple stack-based buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges via a long argument to the (1) "-p" option to lqueryvg or (2) the "-V" option to lquerypv. | |||||
CVE-2013-5419 | 1 Ibm | 1 Aix | 2017-09-19 | 6.9 MEDIUM | N/A |
Multiple buffer overflows in (1) mkque and (2) mkquedev in bos.rte.printers in IBM AIX 6.1 and 7.1 allow local users to gain privileges by leveraging printq group membership. | |||||
CVE-2013-4011 | 1 Ibm | 2 Aix, Vios | 2017-09-19 | 7.2 HIGH | N/A |
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to gain privileges via vectors involving (1) arp.ib or (2) ibstat. | |||||
CVE-2013-3035 | 1 Ibm | 2 Aix, Vios | 2017-09-19 | 7.1 HIGH | N/A |
The IPv6 implementation in the inet subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allows remote attackers to cause a denial of service (system hang) via a crafted packet to an IPv6 interface. | |||||
CVE-2013-3005 | 1 Ibm | 2 Aix, Vios | 2017-09-19 | 8.5 HIGH | N/A |
The TFTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, when RBAC is enabled, allows remote authenticated users to bypass intended file-ownership restrictions, and read or overwrite arbitrary files, via unspecified vectors. | |||||
CVE-2010-3406 | 1 Ibm | 1 Aix | 2017-09-19 | 1.7 LOW | N/A |
Unspecified vulnerability in sa_snap in the bos.esagent fileset in IBM AIX 5.3 allows local users to leverage system group membership and delete files via unknown vectors. | |||||
CVE-2010-0961 | 1 Ibm | 2 Aix, Vios | 2017-09-19 | 7.2 HIGH | N/A |
Buffer overflow in qoslist in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors. | |||||
CVE-2010-0960 | 1 Ibm | 2 Aix, Vios | 2017-09-19 | 7.2 HIGH | N/A |
Buffer overflow in qosmod in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors. | |||||
CVE-2009-3517 | 1 Ibm | 1 Aix | 2017-09-19 | 10.0 HIGH | N/A |
nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfs_portmon setting, which allows remote attackers to bypass intended access restrictions for NFSv4 shares via unspecified vectors. | |||||
CVE-2009-3516 | 1 Ibm | 1 Aix | 2017-09-19 | 7.2 HIGH | N/A |
gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors. | |||||
CVE-2016-3053 | 1 Ibm | 1 Aix | 2017-09-03 | 7.2 HIGH | 7.8 HIGH |
IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. | |||||
CVE-2014-4805 | 2 Ibm, Linux | 3 Aix, Db2, Linux Kernel | 2017-08-29 | 2.1 LOW | N/A |
IBM DB2 10.5 before FP4 on Linux and AIX creates temporary files during CDE table LOAD operations, which allows local users to obtain sensitive information by reading a file while a LOAD is occurring. | |||||
CVE-2014-0899 | 1 Ibm | 1 Aix | 2017-08-29 | 6.5 MEDIUM | N/A |
ftpd in IBM AIX 7.1.1 before SP10 and 7.1.2 before SP5, when a Workload Partition (aka WPAR) for AIX 5.2 or 5.3 is used, allows remote authenticated users to bypass intended permission settings and modify arbitrary files via FTP commands. | |||||
CVE-2012-2179 | 1 Ibm | 1 Aix | 2017-08-29 | 6.9 MEDIUM | N/A |
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file. | |||||
CVE-2012-0194 | 1 Ibm | 1 Aix | 2017-08-29 | 7.1 HIGH | N/A |
The TCP implementation in IBM AIX 5.3, 6.1, and 7.1, when the Large Send Offload option is enabled, allows remote attackers to cause a denial of service (assertion failure and panic) via an unspecified series of packets. | |||||
CVE-2011-3982 | 1 Ibm | 1 Aix | 2017-08-29 | 2.1 LOW | N/A |
The Fibre Channel driver for QLogic adapters in IBM AIX 6.1 and 7.1 does not properly handle DMA resource limitations, which allows local users to cause a denial of service (system hang) via vectors that generate a large amount of DMA I/O, related to a deadlock in timer processing across CPUs. | |||||
CVE-2011-1384 | 1 Ibm | 2 Aix, Invscout.rte | 2017-08-17 | 4.0 MEDIUM | N/A |
The (1) bin/invscoutClient_VPD_Survey and (2) sbin/invscout_lsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout operations on arbitrary files, via a symlink attack on an unspecified file. | |||||
CVE-2011-1375 | 1 Ibm | 1 Aix | 2017-08-17 | 4.9 MEDIUM | N/A |
IBM AIX 6.1 and 7.1 does not restrict the wpar_limits_config and wpar_limits_modify system calls, which allows local users to cause a denial of service (system crash) via a crafted call. |