ibm vulnerabilities, newest first, page 181
Filter
- –CVE-1999-0115ExploitEPSS 0.7%
AIX bugfiler program allows local users to gain root access.
- –CVE-1999-0024EPSS 5.0%
DNS cache poisoning via BIND, by predictable query IDs.
- –CVE-1999-0566EPSS 1.3%
An attacker can write to syslog files from any location, causing a denial of service by filling up the logs, and hiding activities.
- 4.0CVE-1999-0524EPSS 32%
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
- –CVE-1999-1208ExploitEPSS 0.8%
Buffer overflow in ping in AIX 4.2 and earlier allows local users to gain root privileges via a long command line argument.
- –CVE-1999-0122ExploitEPSS 1.1%
Buffer overflow in AIX lchangelv gives root access.
- –CVE-1999-0628EPSS 1.5%
The rwho/rwhod service is running, which exposes machine status and user information.
- –CVE-1999-0111EPSS 1.4%
RIP v1 is susceptible to spoofing.
- –CVE-1999-0033EPSS 0.6%
Command execution in Sun systems via buffer overflow in the at program.
- –CVE-1999-0064ExploitEPSS 0.7%
Buffer overflow in AIX lquerylv program gives root access to local users.
- –CVE-1999-0112ExploitEPSS 0.8%
Buffer overflow in AIX dtterm program for the CDE.
- –CVE-1999-0040ExploitEPSS 1.2%
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
- 8.4CVE-1999-0038ExploitEPSS 1.3%
Buffer overflow in xlock program allows local users to execute commands as root.
- –CVE-1999-0042ExploitEPSS 13%
Buffer overflow in University of Washington's implementation of IMAP and POP servers.
- –CVE-1999-1408ExploitEPSS 1.0%
Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service (crash) by using a socket to connect to a port on the localhost, calling shutdown to clear the socket, then using the same socket to connec…
- –CVE-1999-0318EPSS 0.6%
Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable.
- –CVE-1999-0041ExploitEPSS 9.1%
Buffer overflow in NLS (Natural Language Service).
- –CVE-1999-0046ExploitEPSS 52%
Buffer overflow of rlogin program using TERM environmental variable.
- –CVE-1999-0048EPSS 3.1%
Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.
- –CVE-1999-0345EPSS 1.3%
Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.
- –CVE-1999-0128ExploitEPSS 75%
Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
- –CVE-1999-0101ExploitEPSS 8.4%
Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.
- –CVE-1999-0129EPSS 0.6%
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
- –CVE-1999-0130ExploitEPSS 1.1%
Local users can start Sendmail in daemon mode and gain root privileges.
- –CVE-1999-0116ExploitEPSS 5.6%
Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood.
- –CVE-1999-0131EPSS 0.6%
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
- –CVE-1999-0085EPSS 3.9%
Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname.
- –CVE-1999-0023ExploitEPSS 0.8%
Local user gains root privileges via buffer overflow in rdist, via lookup() function.
- 7.8CVE-1999-0022EPSS 0.5%
Local user gains root privileges via buffer overflow in rdist, via expstr() function.
- –CVE-1999-0138EPSS 0.7%
The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.
- –CVE-1999-0019EPSS 1.7%
Delete or create a file via rpc.statd, due to invalid information.
- –CVE-1999-0078EPSS 0.9%
pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.
- –CVE-1999-0208ExploitEPSS 13%
rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
- –CVE-1999-0099EPSS 3.3%
Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.
- –CVE-1999-1552EPSS 0.3%
dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check privileges, which allows local users to overwrite arbitrary files and gain privileges.
- –CVE-1999-0337EPSS 2.0%
AIX batch queue (bsh) allows local and remote users to gain additional privileges when network printing is enabled.
- –CVE-1999-0113ExploitEPSS 17%
Some implementations of rlogin allow root access if given a -froot parameter.
- –CVE-1999-0338EPSS 0.4%
AIX Licensed Program Product performance tools allow local users to gain root access.
- –CVE-1999-1119EPSS 4.2%
FTP installation script anon.ftp in AIX insecurely configures anonymous FTP, which allows remote attackers to execute arbitrary commands.
- –CVE-1999-0117EPSS 0.4%
AIX passwd allows local users to gain root access.
- –CVE-1999-1121EPSS 0.9%
The default configuration for UUCP in AIX before 3.2 allows local users to gain root privileges.
- –CVE-1999-0627EPSS 6.8%
The rexd service is running, which uses weak authentication that can allow an attacker to execute commands.