Aix
by IBM
CVEs (402)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2010-3406 | 0.00 | — | 0.00 | Sep 16, 2010 | Unspecified vulnerability in sa_snap in the bos.esagent fileset in IBM AIX 5.3 allows local users to leverage system group membership and delete files via unknown vectors. | |||
| CVE-2010-3405 | 0.00 | — | 0.00 | Sep 16, 2010 | Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, and earlier allows local users to leverage system group membership and gain privileges via unspecified vectors. | |||
| CVE-2010-1124 | 0.00 | — | 0.01 | Mar 26, 2010 | bos.rte.libc 5.3.9.4 on IBM AIX 5.3 does not properly support reading a certain address field after a successful getaddrinfo function call, which allows context-dependent attackers to cause a denial of service (application crash) via unspecified vectors, as demonstrated by IBM… | |||
| CVE-2010-0961 | 0.00 | — | 0.00 | Mar 10, 2010 | Buffer overflow in qoslist in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors. | |||
| CVE-2010-0960 | 0.00 | — | 0.00 | Mar 10, 2010 | Buffer overflow in qosmod in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors. | |||
| CVE-2010-0922 | 0.00 | — | 0.01 | Mar 3, 2010 | Unspecified vulnerability in secldapclntd in IBM AIX 5.3 with SP 5300-11-02 allows attackers to cause a denial of service (LDAP login failure) via unknown vectors. NOTE: some of these details are obtained from third party information. NOTE: there may be no attacker role, and… | |||
| CVE-2009-4362 | 0.00 | — | 0.00 | Dec 21, 2009 | Multiple buffer overflows in qosmod in IBM AIX 6.1 allow local users to cause a denial of service (application crash) or possibly gain privileges via long string arguments. NOTE: some of these details are obtained from third party information. | |||
| CVE-2009-4361 | 0.00 | — | 0.00 | Dec 21, 2009 | Multiple buffer overflows in qoslist in IBM AIX 6.1 allow local users to cause a denial of service (application crash) or possibly gain privileges via a long string argument. NOTE: some of these details are obtained from third party information. | |||
| CVE-2009-3517 | 0.00 | — | 0.04 | Oct 1, 2009 | nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfs_portmon setting, which allows remote attackers to bypass intended access restrictions for NFSv4 shares via unspecified vectors. | |||
| CVE-2009-3516 | 0.00 | — | 0.00 | Oct 1, 2009 | gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors. | |||
| CVE-2009-2434 | 0.00 | — | 0.00 | Jul 13, 2009 | Buffer overflow in the syscall implementation in IBM AIX 5.3 allows local users to gain privileges via unspecified vectors. | |||
| CVE-2009-1954 | 0.00 | — | 0.01 | Jun 8, 2009 | Unspecified vulnerability in portmapper (aka portmap) in IBM AIX 5.3 allows attackers to cause a denial of service (daemon hang) via unknown vectors, related to libtli. | |||
| CVE-2009-1355 | 0.00 | — | 0.00 | Apr 21, 2009 | Stack-based buffer overflow in muxatmd in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via a long filename. | |||
| CVE-2009-0779 | 0.00 | — | 0.00 | Mar 4, 2009 | Buffer overflow in pppdial in IBM AIX 5.3 and 6.1 allows local users to gain privileges via a long "input string." | |||
| CVE-2009-0536 | 0.00 | — | 0.01 | Feb 11, 2009 | at in bos.rte.cron on IBM AIX 5.2.0, 5.3.0 through 5.3.9, and 6.1.0 through 6.1.2 allows local users to read arbitrary files via unspecified vectors, related to failure to drop root privileges. | |||
| CVE-2009-0370 | 0.00 | — | 0.00 | Jan 30, 2009 | Multiple unspecified vulnerabilities in IBM AIX 5.2.0 through 6.1.2 allow local users to append data to arbitrary files, related to (1) rmsock and (2) rmsock64 not creating "secure log files." | |||
| CVE-2008-5387 | 0.00 | — | 0.00 | Dec 9, 2008 | Buffer overflow in autoconf6 in IBM AIX 6.1.0 through 6.1.2, when Role-Based Access Control is enabled, allows local users with aix.network.config.tcpip authorization to gain privileges via unspecified vectors. | |||
| CVE-2008-5386 | 0.00 | — | 0.00 | Dec 9, 2008 | Buffer overflow in ndp in IBM AIX 6.1.0 through 6.1.2, when the netcd daemon is running, allows local users to gain privileges via unspecified vectors. | |||
| CVE-2008-5385 | 0.00 | — | 0.00 | Dec 9, 2008 | enq in bos.rte.printers in IBM AIX 6.1.0 through 6.1.2, when a print queue is defined in /etc/qconfig, allows local users to delete arbitrary files via unspecified vectors. | |||
| CVE-2008-5384 | 0.00 | — | 0.00 | Dec 9, 2008 | crontab in bos.rte.cron in IBM AIX 6.1.0 through 6.1.2 allows local users with aix.system.config.cron authorization to gain privileges by launching an editor. |
- CVE-2010-3406Sep 16, 2010risk 0.00cvss —epss 0.00
Unspecified vulnerability in sa_snap in the bos.esagent fileset in IBM AIX 5.3 allows local users to leverage system group membership and delete files via unknown vectors.
- CVE-2010-3405Sep 16, 2010risk 0.00cvss —epss 0.00
Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, and earlier allows local users to leverage system group membership and gain privileges via unspecified vectors.
- CVE-2010-1124Mar 26, 2010risk 0.00cvss —epss 0.01
bos.rte.libc 5.3.9.4 on IBM AIX 5.3 does not properly support reading a certain address field after a successful getaddrinfo function call, which allows context-dependent attackers to cause a denial of service (application crash) via unspecified vectors, as demonstrated by IBM…
- CVE-2010-0961Mar 10, 2010risk 0.00cvss —epss 0.00
Buffer overflow in qoslist in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors.
- CVE-2010-0960Mar 10, 2010risk 0.00cvss —epss 0.00
Buffer overflow in qosmod in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors.
- CVE-2010-0922Mar 3, 2010risk 0.00cvss —epss 0.01
Unspecified vulnerability in secldapclntd in IBM AIX 5.3 with SP 5300-11-02 allows attackers to cause a denial of service (LDAP login failure) via unknown vectors. NOTE: some of these details are obtained from third party information. NOTE: there may be no attacker role, and…
- CVE-2009-4362Dec 21, 2009risk 0.00cvss —epss 0.00
Multiple buffer overflows in qosmod in IBM AIX 6.1 allow local users to cause a denial of service (application crash) or possibly gain privileges via long string arguments. NOTE: some of these details are obtained from third party information.
- CVE-2009-4361Dec 21, 2009risk 0.00cvss —epss 0.00
Multiple buffer overflows in qoslist in IBM AIX 6.1 allow local users to cause a denial of service (application crash) or possibly gain privileges via a long string argument. NOTE: some of these details are obtained from third party information.
- CVE-2009-3517Oct 1, 2009risk 0.00cvss —epss 0.04
nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfs_portmon setting, which allows remote attackers to bypass intended access restrictions for NFSv4 shares via unspecified vectors.
- CVE-2009-3516Oct 1, 2009risk 0.00cvss —epss 0.00
gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors.
- CVE-2009-2434Jul 13, 2009risk 0.00cvss —epss 0.00
Buffer overflow in the syscall implementation in IBM AIX 5.3 allows local users to gain privileges via unspecified vectors.
- CVE-2009-1954Jun 8, 2009risk 0.00cvss —epss 0.01
Unspecified vulnerability in portmapper (aka portmap) in IBM AIX 5.3 allows attackers to cause a denial of service (daemon hang) via unknown vectors, related to libtli.
- CVE-2009-1355Apr 21, 2009risk 0.00cvss —epss 0.00
Stack-based buffer overflow in muxatmd in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via a long filename.
- CVE-2009-0779Mar 4, 2009risk 0.00cvss —epss 0.00
Buffer overflow in pppdial in IBM AIX 5.3 and 6.1 allows local users to gain privileges via a long "input string."
- CVE-2009-0536Feb 11, 2009risk 0.00cvss —epss 0.01
at in bos.rte.cron on IBM AIX 5.2.0, 5.3.0 through 5.3.9, and 6.1.0 through 6.1.2 allows local users to read arbitrary files via unspecified vectors, related to failure to drop root privileges.
- CVE-2009-0370Jan 30, 2009risk 0.00cvss —epss 0.00
Multiple unspecified vulnerabilities in IBM AIX 5.2.0 through 6.1.2 allow local users to append data to arbitrary files, related to (1) rmsock and (2) rmsock64 not creating "secure log files."
- CVE-2008-5387Dec 9, 2008risk 0.00cvss —epss 0.00
Buffer overflow in autoconf6 in IBM AIX 6.1.0 through 6.1.2, when Role-Based Access Control is enabled, allows local users with aix.network.config.tcpip authorization to gain privileges via unspecified vectors.
- CVE-2008-5386Dec 9, 2008risk 0.00cvss —epss 0.00
Buffer overflow in ndp in IBM AIX 6.1.0 through 6.1.2, when the netcd daemon is running, allows local users to gain privileges via unspecified vectors.
- CVE-2008-5385Dec 9, 2008risk 0.00cvss —epss 0.00
enq in bos.rte.printers in IBM AIX 6.1.0 through 6.1.2, when a print queue is defined in /etc/qconfig, allows local users to delete arbitrary files via unspecified vectors.
- CVE-2008-5384Dec 9, 2008risk 0.00cvss —epss 0.00
crontab in bos.rte.cron in IBM AIX 6.1.0 through 6.1.2 allows local users with aix.system.config.cron authorization to gain privileges by launching an editor.
Page 10 of 21