Ibm Aix vulnerabilities

CVE-2022-40233 [MEDIUM] CWE-20 CVE-2022-40233: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerabili IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599.

CVE-2022-39164 [MEDIUM] CWE-400 CVE-2022-39164: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerabilit IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 235181.

CVE-2006-6914 [MEDIUM] CVE-2006-6914: Unspecified vulnerability in ftpd in IBM AIX 5.2.0 and 5.3.0 allows remote attackers to obtain sensi Unspecified vulnerability in ftpd in IBM AIX 5.2.0 and 5.3.0 allows remote attackers to obtain sensitive information, including passwords, via unspecified vectors.

CVE-1999-0131 [HIGH] CVE-1999-0131: Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root a Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.

CVE-1999-1013 [HIGH] CVE-1999-1013: named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to ga named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and a malformed zone file.

CVE-2000-1122 [HIGH] CVE-2000-1122: Buffer overflow in setclock command in IBM AIX 4.3.x and earlier may allow local users to execute ar Buffer overflow in setclock command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long argument.

CVE-1999-0091 [HIGH] CVE-1999-0091: Buffer overflow in AIX writesrv command allows local users to obtain root access. Buffer overflow in AIX writesrv command allows local users to obtain root access.

CVE-1999-0090 [HIGH] CVE-1999-0090: Buffer overflow in AIX rcp command allows local users to obtain root access. Buffer overflow in AIX rcp command allows local users to obtain root access.

CVE-1999-0338 [HIGH] CVE-1999-0338: AIX Licensed Program Product performance tools allow local users to gain root access. AIX Licensed Program Product performance tools allow local users to gain root access.

CVE-2005-3749 [HIGH] CVE-2005-3749: Unspecified "absolute path vulnerabilities" in the diagela command (diagela.sh) in IBM AIX 5.2 and 5 Unspecified "absolute path vulnerabilities" in the diagela command (diagela.sh) in IBM AIX 5.2 and 5.3 have unknown impact and attack vectors.

CVE-2008-1274 [MEDIUM] CVE-2008-1274: Untrusted search path vulnerability in man in IBM AIX 6.1.0 allows local users to execute arbitrary Untrusted search path vulnerability in man in IBM AIX 6.1.0 allows local users to execute arbitrary code via a malicious program in the man directory.

CVE-2022-43848 [MEDIUM] CWE-20 CVE-2022-43848: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerabili IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169.

CVE-2022-39165 [MEDIUM] CWE-400 CVE-2022-39165: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerabilit IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in CAA to cause a denial of service. IBM X-Force ID: 235183.

CVE-2022-43849 [MEDIUM] CWE-20 CVE-2022-43849: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerabilit IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170.

CVE-2022-43380 [MEDIUM] CWE-399 CVE-2022-43380: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerabil IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640.

CVE-2022-43381 [MEDIUM] CWE-399 CVE-2022-43381: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerabili IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in the AIX SMB client to cause a denial of service. IBM X-Force ID: 238639.

CVE-2016-8944 [MEDIUM] CWE-20 CVE-2016-8944: IBM AIX 7.1 and 7.2 allows a local user to open a file with a specially crafted argument that would IBM AIX 7.1 and 7.2 allows a local user to open a file with a specially crafted argument that would crash the system. IBM APARs: IV91488, IV91487, IV91456, IV90234.

CVE-2023-45172 [MEDIUM] CWE-20 CVE-2023-45172: IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in AIX windows to cause a denial of service. IBM X-Force ID: 267970.

CVE-1999-0093 [HIGH] CVE-1999-0093: AIX nslookup command allows local users to obtain root access by not dropping privileges correctly. AIX nslookup command allows local users to obtain root access by not dropping privileges correctly.

CVE-2003-0697 [HIGH] CVE-2003-0697: Format string vulnerability in lpd in the bos.rte.printers fileset for AIX 4.3 through 5.2, with deb Format string vulnerability in lpd in the bos.rte.printers fileset for AIX 4.3 through 5.2, with debug enabled, allows local users to cause a denial of service (crash) or gain root privileges.