Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Aix
Total 778 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-0262 1 Ibm 1 Aix 2017-07-11 7.2 HIGH N/A
Buffer overflow in ipl_varyon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -d argument.
CVE-2005-0263 1 Ibm 1 Aix 2017-07-11 7.2 HIGH N/A
Buffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -O argument.
CVE-2005-1176 1 Ibm 1 Aix 2017-07-11 1.2 LOW N/A
Race condition in JFS2 on AIX 5.2 and 5.3, when deleting a file while I/O is still occurring for that file, may write data to a different file, which could leak sensitive information.
CVE-2005-0250 1 Ibm 1 Aix 2017-07-11 7.2 HIGH N/A
Format string vulnerability in auditselect on IBM AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via format string specifiers in a command line argument.
CVE-2004-2388 1 Ibm 1 Aix 2017-07-11 10.0 HIGH N/A
rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the structure to be overwritten by the authenticate function and assign privileges to the wrong user.
CVE-2004-2312 1 Ibm 1 Aix 2017-07-11 7.2 HIGH N/A
Buffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain privileges via a long CC argument.
CVE-2004-1028 1 Ibm 1 Aix 2017-07-11 7.2 HIGH N/A
Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious "grep" program, which is executed from chcod.
CVE-2004-1054 1 Ibm 1 Aix 2017-07-11 7.2 HIGH N/A
Untrusted execution path vulnerability in invscout in IBM AIX 5.1.0, 5.2.0, and 5.3.0 allows local users to gain privileges by modifying the PATH environment variable to point to a malicious "uname" program, which is executed from lsvpd after lsvpd has been invoked by invscout.
CVE-2004-0545 1 Ibm 1 Aix 2017-07-11 7.2 HIGH N/A
LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack.
CVE-2004-0828 1 Ibm 1 Aix 2017-07-11 2.1 LOW N/A
The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before executing the -f option, which allows local users to modify or create arbitrary files.
CVE-2004-0544 1 Ibm 1 Aix 2017-07-11 7.2 HIGH N/A
Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands.
CVE-2004-1330 1 Ibm 1 Aix 2017-07-11 7.2 HIGH N/A
Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username.
CVE-2002-1622 1 Ibm 1 Aix 2017-07-11 7.5 HIGH N/A
Buffer overflow in certain RPC routines in IBM AIX 4.3 may allow attackers to execute arbitrary code, related to a "variable data type."
CVE-2003-0257 1 Ibm 1 Aix 2017-07-11 7.2 HIGH N/A
Format string vulnerability in the printer capability for IBM AIX .3, 5.1, and 5.2 allows local users to gain printq or root privileges.
CVE-2000-1222 1 Ibm 1 Aix 2017-07-11 7.2 HIGH N/A
AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by modifying the path to point to a malicious hostname program.
CVE-2002-1619 1 Ibm 1 Aix 2017-07-11 5.0 MEDIUM N/A
Buffer overflow in the FC client for IBM AIX 4.3.x allows remote attackers to cause a denial of service (crash and core dump).
CVE-2003-0170 1 Ibm 1 Aix 2017-07-11 10.0 HIGH N/A
Unknown vulnerability in ftpd in IBM AIX 5.2, when configured to use Kerberos 5 for authentication, allows remote attackers to gain privileges via unknown attack vectors.
CVE-1999-1574 1 Ibm 1 Aix 2017-07-11 7.5 HIGH N/A
Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execute arbitrary code via "long input strings."
CVE-2003-0696 1 Ibm 1 Aix 2017-07-11 5.0 MEDIUM N/A
The getipnodebyname() API in AIX 5.1 and 5.2 does not properly close sockets, which allows attackers to cause a denial of service (resource exhaustion).
CVE-2003-1018 1 Ibm 1 Aix 2017-07-11 7.2 HIGH N/A
Format string vulnerability in enq command in AIX 4.3, 5.1, and 5.2 allows local users with rintq group privileges to gain privileges via unknown attack vectors.