cve.bz

ibm vulnerabilities, newest first, page 178

Filter
  1. –CVE-2002-0905ExploitEPSS 1.1%

    Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable.

  2. –CVE-2002-0679EPSS 23%

    Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure.

  3. –CVE-2002-0790EPSS 0.4%

    clchkspuser and clpasswdremote in AIX expose an encrypted password in the cspoc.log file, which could allow local users to gain privileges.

  4. –CVE-2002-0747ExploitEPSS 6.0%

    Buffer overflow in lsmcode in AIX 4.3.3.

  5. –CVE-2002-0746EPSS 1.8%

    Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument.

  6. –CVE-2002-0745EPSS 1.5%

    Buffer overflow in uucp in AIX 4.3.3.

  7. –CVE-2002-0744EPSS 1.5%

    namerslv in AIX 4.3.3 core dumps when called with a very long argument, possibly as a result of a buffer overflow.

  8. –CVE-2002-0743EPSS 1.5%

    mail and mailx in AIX 4.3.3 core dump when called with a very long argument, an indication of a buffer overflow.

  9. –CVE-2002-0742EPSS 1.5%

    Buffer overflow in pioout on AIX 4.3.3.

  10. –CVE-2002-1450EPSS 1.1%

    IBM UniVerse with UV/ODBC allows attackers to cause a denial of service (client crash or server CPU consumption) via a query with an invalid link between tables, possibly via a buffer overflow.

  11. –CVE-2002-0678EPSS 9.4%

    CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.

  12. –CVE-2002-0677EPSS 6.6%

    CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table in…

  13. –CVE-2002-0555EPSS 1.6%

    IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQL code in a web form even when the developer has attempted to escape it.

  14. –CVE-2002-0554ExploitEPSS 6.7%

    webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary files via a SQL injection attack in an HTTP request.

  15. –CVE-2002-0541EPSS 4.0%

    Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and (2) the TSM Client Acceptor Service 4.2 and 5.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary co…

  16. –CVE-2002-1621EPSS 6.6%

    Buffer overflow in the file_comp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code.

  17. –CVE-2002-0037EPSS 2.6%

    Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses the object.

  18. –CVE-2002-1620EPSS 1.7%

    Unknown vulnerability in IBM AIX Parallel Systems Support Programs (PSSP) 3.1.1, 3.2, and 3.4 allows remote attackers to read arbitrary files from a file collection.

  19. –CVE-2002-0086EPSS 0.4%

    Buffer overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux allows local users to gain root privileges via a long (1) Notes_ExecDirectory or (2) PATH environment variable.

  20. –CVE-2002-1619EPSS 2.2%

    Buffer overflow in the FC client for IBM AIX 4.3.x allows remote attackers to cause a denial of service (crash and core dump).

  21. –CVE-2001-1079EPSS 0.3%

    create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service.

  22. –CVE-2001-1567EPSS 1.6%

    Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of "+" characters befor…

  23. –CVE-2001-1557EPSS 1.2%

    Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges.

  24. –CVE-2001-1554EPSS 1.2%

    IBM AIX 430 does not properly unlock IPPMTU_LOCK, which allows remote attackers to cause a denial of service (hang) via Path Maximum Transmit Unit (PMTU) IP packets.

  25. –CVE-2001-1529EPSS 1.4%

    Buffer overflow in rpc.yppasswdd (yppasswd server) in AIX allows attackers to gain unauthorized access via a long string. NOTE: due to lack of details in the vendor advisory, it is not clear if this is the same issue as CVE-2001-0779.

  26. –CVE-2001-1504EPSS 2.1%

    Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed when the user processes the e-mail message.

  27. –CVE-2001-1440EPSS 5.0%

    Unknown vulnerability in login for AIX 5.1L, when using loadable authentication modules, allows remote attackers to gain access to the system.

  28. –CVE-2001-1189EPSS 0.3%

    IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script.

  29. –CVE-2001-0797ExploitEPSS 95%

    Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.

  30. –CVE-2001-1191EPSS 1.3%

    WebSeal in IBM Tivoli SecureWay Policy Director 3.8 allows remote attackers to cause a denial of service (crash) via a URL that ends in %2e.

  31. –CVE-2001-0856EPSS 0.5%

    Common Cryptographic Architecture (CCA) in IBM 4758 allows an attacker with physical access to the system and Combine_Key_Parts permissions, to steal DES and 3DES keys by using a brute force attack to create a 3DES exporter key.

  32. –CVE-2001-0824EPSS 2.3%

    Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a request for a .JSP file, or (2) a request to the webapp/examples/ directory, which in…

  33. –CVE-2001-0671EPSS 4.8%

    Buffer overflows in (1) send_status, (2) kill_print, and (3) chk_fhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges.

  34. –CVE-2001-0924ExploitEPSS 8.1%

    Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote attackers to read arbitrary files via a .. (dot dot) in the LO parameter.

  35. –CVE-2001-1096EPSS 0.4%

    Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code.

  36. –CVE-2001-1095EPSS 0.4%

    Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter.

  37. –CVE-2001-0998EPSS 2.9%

    IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports (e.g., using a port scan) that does not send additional data, which causes a failure in snmpd.

  38. –CVE-2001-0552ExploitEPSS 26%

    ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message.

  39. –CVE-2001-0962EPSS 1.6%

    IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing.

  40. –CVE-2000-1215EPSS 1.8%

    The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP headers of replies, which allows remote attackers to obtain sensitive information.

  41. –CVE-2001-1061EPSS 1.8%

    Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error.

  42. –CVE-2000-1202EPSS 0.6%

    ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which allows a malicious local user to execute arbitrary code as root via a Trojan horse…

  43. –CVE-2001-0554ExploitEPSS 39%

    Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.

  44. –CVE-2001-0533EPSS 0.4%

    Buffer overflow in libi18n library in IBM AIX 5.1 and 4.3.x allows local users to gain root privileges via a long LANG environmental variable.

  45. –CVE-2001-0573EPSS 0.5%

    lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2) lslv in a certain directory that is under the user's control, which cause lsfs to access the programs in that directo…

  46. –CVE-2001-0982EPSS 2.3%

    Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded .. (dot dot) sequences containing "%2e" strings.

  47. –CVE-2000-0891EPSS 3.0%

    A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email message that is automatically executed when the user opens the email.

  48. –CVE-2001-1265EPSS 4.2%

    Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbitrary files via a .. (dot dot) attack.

  49. –CVE-2001-1313EPSS 3.9%

    Lotus Domino R5 before R5.0.7a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via miscellaneous packets with semi-valid BER encodings, as demonstrated by the PROTOS LDAPv3 test suite.

  50. –CVE-2001-1312EPSS 4.5%

    Format string vulnerabilities in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.