| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Various vulnerabilities in the AIX portmir command allows local users to obtain root access. |
| Buffer overflow in University of Washington's implementation of IMAP and POP servers. |
| Buffer overflow in statd allows root privileges. |
| Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument. |
| Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument. |
| The rwho/rwhod service is running, which exposes machine status and user information. |
| Buffer overflow in nslookup in IBM AIX may allow attackers to cause a denial of service or execute arbitrary code. |
| dump_smutil.sh in IBM AIX allows local users to overwrite arbitrary files via a symlink attack on temporary files. |
| The rexd service is running, which uses weak authentication that can allow an attacker to execute commands. |
| Buffer overflow in AIX writesrv command allows local users to obtain root access. |
| Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code. |
| Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter. |
| An attacker can write to syslog files from any location, causing a denial of service by filling up the logs, and hiding activities. |
| diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allows local users to gain privileges by modifying the variable to point to a Trojan horse program. |
| create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service. |
| Buffer overflow in AIX rcp command allows local users to obtain root access. |
| Buffer overflow in NLS (Natural Language Service). |
| Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error. |
| IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports (e.g., using a port scan) that does not send additional data, which causes a failure in snmpd. |
| ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service. |
