cve.bz

ibm vulnerabilities, newest first, page 180

Filter
  1. –CVE-2000-0027ExploitEPSS 0.6%

    IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack.

  2. –CVE-1999-0852EPSS 0.3%

    IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin.

  3. –CVE-1999-0851EPSS 0.4%

    Denial of service in BIND named via naptr.

  4. –CVE-1999-0835EPSS 1.5%

    Denial of service in BIND named via malformed SIG records.

  5. –CVE-1999-1531ExploitEPSS 4.9%

    Buffer overflow in IBM HomePagePrint 1.0.7 for Windows98J allows a malicious Web site to execute arbitrary code on a viewer's system via a long IMG_SRC HTML tag.

  6. –CVE-1999-0903EPSS 1.5%

    genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767.

  7. –CVE-1999-1583EPSS 0.6%

    Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument.

  8. –CVE-1999-0789ExploitEPSS 3.1%

    Buffer overflow in AIX ftpd in the libc library.

  9. –CVE-1999-1013EPSS 0.5%

    named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and a malformed zone file.

  10. –CVE-1999-0691ExploitEPSS 0.8%

    Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.

  11. –CVE-1999-0687EPSS 2.2%

    The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.

  12. –CVE-1999-0745ExploitEPSS 3.3%

    Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler.

  13. –CVE-1999-0694EPSS 0.3%

    Denial of service in AIX ptrace system call allows local users to crash the system.

  14. –CVE-1999-1414ExploitEPSS 0.7%

    IBM Netfinity Remote Control allows local users to gain administrator privileges by starting programs from the process manager, which runs with system level privileges.

  15. –CVE-1999-0803ExploitEPSS 0.5%

    The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack.

  16. –CVE-1999-1079EPSS 0.3%

    Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program.

  17. –CVE-1999-0429EPSS 1.4%

    The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference.

  18. –CVE-1999-1405ExploitEPSS 3.3%

    snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by …

  19. –CVE-1999-1546EPSS 1.1%

    netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable.

  20. –CVE-1999-0057EPSS 8.2%

    Vacation program allows command execution by remote users through a sendmail command.

  21. –CVE-1999-0118ExploitEPSS 0.7%

    AIX infod allows local users to gain root access through an X display.

  22. –CVE-1999-0088EPSS 4.0%

    IRIX and AIX automountd services (autofsd) allow remote users to execute root commands.

  23. –CVE-1999-1404EPSS 1.3%

    IBM/Tivoli OPC Tracker Agent version 2 release 1 allows remote attackers to cause a denial of service (resource exhaustion) via malformed data to the localtracker client port (5011), which prevents the connection from being closed properly.

  24. –CVE-1999-1403EPSS 0.3%

    IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions (world-readable and world-writable), which could allow local users to disrupt operations and possibly gain privil…

  25. –CVE-1999-1574EPSS 3.0%

    Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execute arbitrary code via "long input strings."

  26. –CVE-1999-1480EPSS 0.2%

    (1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack.

  27. –CVE-1999-0055EPSS 0.4%

    Buffer overflows in Sun libnsl allow root access.

  28. 5.4CVE-1999-0011EPSS 5.5%

    Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.

  29. –CVE-1999-0010EPSS 2.4%

    Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.

  30. –CVE-1999-0009ExploitEPSS 29%

    Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.

  31. –CVE-1999-0003ExploitEPSS 24%

    Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).

  32. –CVE-1999-1075EPSS 1.3%

    inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attackers to cause a denial of service via a …

  33. –CVE-1999-1486EPSS 0.3%

    sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack.

  34. –CVE-1999-0087EPSS 1.4%

    Denial of service in AIX telnet can freeze a system and prevent users from accessing the server.

  35. –CVE-1999-1487EPSS 0.4%

    Vulnerability in digest in AIX 4.3 allows printq users to gain root privileges by creating and/or modifing any file on the system.

  36. –CVE-1999-0014ExploitEPSS 1.2%

    Unauthorized privileged access or denial of service via dtappgather program in CDE.

  37. –CVE-1999-0086EPSS 2.1%

    AIX routed allows remote users to modify sensitive files.

  38. –CVE-1999-0513ExploitEPSS 71%

    ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.

  39. –CVE-1999-0284ExploitEPSS 12%

    Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command.

  40. –CVE-1999-0017EPSS 2.0%

    FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.

  41. –CVE-1999-0018ExploitEPSS 10%

    Buffer overflow in statd allows root privileges.

  42. –CVE-1999-0097EPSS 4.0%

    The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character).

  43. –CVE-1999-0094EPSS 0.4%

    AIX piodmgrsu command allows local users to gain additional group privileges.

  44. –CVE-1999-0093EPSS 0.4%

    AIX nslookup command allows local users to obtain root access by not dropping privileges correctly.

  45. –CVE-1999-0092ExploitEPSS 0.8%

    Various vulnerabilities in the AIX portmir command allows local users to obtain root access.

  46. –CVE-1999-0091EPSS 0.4%

    Buffer overflow in AIX writesrv command allows local users to obtain root access.

  47. –CVE-1999-0089EPSS 0.4%

    Buffer overflow in AIX libDtSvc library can allow local users to gain root access.

  48. –CVE-1999-0072EPSS 0.4%

    Buffer overflow in AIX xdat gives root access to local users.

  49. –CVE-1999-0090EPSS 0.4%

    Buffer overflow in AIX rcp command allows local users to obtain root access.

  50. –CVE-1999-1275EPSS 0.3%

    Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local users to gain privileges.