cve.bz

ibm vulnerabilities, newest first, page 179

Filter
  1. –CVE-2001-1311EPSS 7.0%

    Buffer overflows in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.

  2. –CVE-2001-1310EPSS 4.5%

    IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for the L field of a BER encoding, as demonstrated by the PROTOS LDAPv3 test suite.

  3. –CVE-2001-1309EPSS 5.3%

    Buffer overflows in IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.

  4. –CVE-2001-1143EPSS 1.6%

    IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6790, or (2) db2jds.exe on port 6789.

  5. –CVE-2001-1441EPSS 2.7%

    Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute JavaScript on other clients via the URL, which injects the script in the resulting error message.

  6. –CVE-2001-0390ExploitEPSS 5.1%

    IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long string of %0a characters.

  7. –CVE-2001-0389EPSS 1.4%

    IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a NOEXISTINGHTMLBLOCK argument.

  8. –CVE-2001-0487EPSS 1.6%

    AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection.

  9. –CVE-2001-0472EPSS 1.3%

    Hursley Software Laboratories Consumer Transaction Framework (HSLCTF) HTTP object allows remote attackers to cause a denial of service (crash) via an extremely long HTTP request.

  10. –CVE-2001-1080ExploitEPSS 5.9%

    diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allows local users to gain privileges by modifying the variable to point to a Trojan horse program.

  11. –CVE-2001-0446EPSS 1.3%

    IBM WCS (WebSphere Commerce Suite) 4.0.1 with Application Server 3.0.2 allows remote attackers to read source code for .jsp files by appending a / to the requested URL.

  12. –CVE-2001-1330EPSS 0.4%

    Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.

  13. –CVE-2001-1329EPSS 0.4%

    Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.

  14. –CVE-2001-0312EPSS 1.5%

    IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTTP request that contains a host header that references a host that is not in WebSphere's host aliases list, which will b…

  15. –CVE-2001-0319ExploitEPSS 7.1%

    orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the order_rn option of the report capability.

  16. –CVE-2001-0122ExploitEPSS 3.3%

    Kernel leak in AfpaCache module of the Fast Response Cache Accelerator (FRCA) component of IBM HTTP Server 1.3.x and Websphere 3.52 allows remote attackers to cause a denial of service via a series of malformed HTTP requests that generate …

  17. –CVE-1999-0729EPSS 1.7%

    Buffer overflow in Lotus Notes LDAP (NLDAP) allows an attacker to conduct a denial of service through the ldap_search request.

  18. –CVE-1999-0718ExploitEPSS 0.8%

    IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privileges by changing the GroupMapping registry key.

  19. –CVE-2001-0052ExploitEPSS 1.2%

    IBM DB2 Universal Database version 6.1 allows users to cause a denial of service via a malformed query.

  20. –CVE-2001-0051ExploitEPSS 2.8%

    IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote attackers to gain access to the database.

  21. –CVE-2000-1168EPSS 1.9%

    IBM HTTP Server 1.3.6 (based on Apache) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request.

  22. –CVE-2000-1138EPSS 1.2%

    Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, which could allow an attacker to modify the email in transit without being detected.

  23. –CVE-2000-1124ExploitEPSS 0.9%

    Buffer overflow in piobe command in IBM AIX 4.3.x allows local users to gain privileges via long environmental variables.

  24. –CVE-2000-1123EPSS 0.4%

    Buffer overflow in pioout command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands.

  25. –CVE-2000-1122EPSS 0.4%

    Buffer overflow in setclock command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long argument.

  26. –CVE-2000-1121ExploitEPSS 1.0%

    Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long -M argument.

  27. –CVE-2000-1120ExploitEPSS 1.0%

    Buffer overflow in digest command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands.

  28. –CVE-2000-1119ExploitEPSS 1.0%

    Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a long "x=" argument.

  29. –CVE-2000-1117EPSS 2.9%

    The Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client R5 allows malicious web site operators to determine the existence of files on the client by measuring delays in the execution of the getSystemR…

  30. –CVE-2000-1110ExploitEPSS 2.7%

    document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by sending a nonexistent command to the program.

  31. –CVE-2000-1239EPSS 2.1%

    The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Confi…

  32. –CVE-2000-1038EPSS 1.7%

    The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an empty GET request.

  33. –CVE-2000-1222EPSS 0.3%

    AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by modifying the path to point to a malicious hostname program.

  34. –CVE-2000-0873ExploitEPSS 0.6%

    netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and possibly hide evidence of unusual network activities.

  35. –CVE-2000-0848ExploitEPSS 6.4%

    Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host: request header.

  36. –CVE-2000-0844ExploitEPSS 16%

    Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.

  37. –CVE-2000-0761EPSS 1.7%

    OS2/Warp 4.5 FTP server allows remote attackers to cause a denial of service via a long username.

  38. –CVE-2000-0677EPSS 3.1%

    Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PATH_INFO environmental variable.

  39. –CVE-2000-0652ExploitEPSS 8.0%

    IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" string.

  40. –CVE-2000-0466EPSS 0.4%

    AIX cdmount allows local users to gain root privileges via shell metacharacters.

  41. 7.5CVE-2000-0497EPSS 3.1%

    IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.

  42. –CVE-2000-0505ExploitEPSS 47%

    The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters.

  43. –CVE-2000-0441EPSS 0.9%

    Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems.

  44. –CVE-2000-0249EPSS 0.3%

    The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program.

  45. –CVE-1999-0693ExploitEPSS 1.0%

    Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges.

  46. –CVE-2000-1216EPSS 0.5%

    Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine.

  47. –CVE-2000-0080EPSS 0.3%

    AIX techlibss allows local users to overwrite files via a symlink attack.

  48. –CVE-1999-1589EPSS 0.3%

    Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors.

  49. –CVE-1999-1488ExploitEPSS 3.6%

    sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication.

  50. –CVE-1999-1117ExploitEPSS 0.7%

    lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter.