Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Aix
Total 795 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-0903 1 Ibm 1 Aix 2025-04-03 7.5 HIGH N/A
genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767.
CVE-2000-1121 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long -M argument.
CVE-1999-0129 7 Bsdi, Eric Allman, Freebsd and 4 more 9 Bsd Os, Sendmail, Freebsd and 6 more 2025-04-03 4.6 MEDIUM N/A
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
CVE-2004-1028 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious "grep" program, which is executed from chcod.
CVE-1999-0086 1 Ibm 1 Aix 2025-04-03 5.0 MEDIUM N/A
AIX routed allows remote users to modify sensitive files.
CVE-1999-0524 11 Apple, Cisco, Hp and 8 more 14 Mac Os X, Macos, Ios and 11 more 2025-04-03 2.1 LOW N/A
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
CVE-2005-1037 1 Ibm 1 Aix 2025-04-03 10.0 HIGH N/A
Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges.
CVE-1999-0122 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
Buffer overflow in AIX lchangelv gives root access.
CVE-2006-0667 1 Ibm 1 Aix 2025-04-03 4.6 MEDIUM N/A
lscfg in IBM AIX 5.2 and 5.3 allows local users to modify arbitrary files via a symlink attack.
CVE-1999-0687 4 Cde, Digital, Ibm and 1 more 5 Cde, Unix, Aix and 2 more 2025-04-03 7.5 HIGH N/A
The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.
CVE-2002-0677 7 Caldera, Compaq, Hp and 4 more 9 Openunix, Unixware, Tru64 and 6 more 2025-04-03 7.5 HIGH N/A
CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.
CVE-2004-0544 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands.
CVE-2004-0368 3 Ibm, Open Group, Xi Graphics 3 Aix, Cde Common Desktop Environment, Dextop 2025-04-03 10.0 HIGH N/A
Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet.
CVE-2002-1468 1 Ibm 1 Aix 2025-04-03 10.0 HIGH N/A
Buffer overflow in errpt in AIX 4.3.3 allows local users to execute arbitrary code as root.
CVE-1999-0318 4 Hp, Ibm, Redhat and 1 more 5 Hp-ux, Aix, Linux and 2 more 2025-04-03 7.2 HIGH N/A
Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable.
CVE-1999-1121 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
The default configuration for UUCP in AIX before 3.2 allows local users to gain root privileges.
CVE-2003-0285 1 Ibm 1 Aix 2025-04-03 5.0 MEDIUM N/A
IBM AIX 5.2 and earlier distributes Sendmail with a configuration file (sendmail.cf) with the (1) promiscuous_relay, (2) accept_unresolvable_domains, and (3) accept_unqualified_senders features enabled, which allows Sendmail to be used as an open mail relay for sending spam e-mail.
CVE-1999-1589 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors.
CVE-2003-0954 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
Buffer overflow in rcp for AIX 4.3.3, 5.1 and 5.2 allows local users to gain privileges.
CVE-2006-2647 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
Untrusted search path vulnerability in update_flash for IBM AIX 5.1, 5.2 and 5.3 allows local users to execute arbitrary commands via unknown vectors involving lsmcode and possibly other commands.