Ibm Aix vulnerabilities

CVE-2006-5006 [HIGH] CVE-2006-5006: Buffer overflow in cfgmgr in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary code vi Buffer overflow in cfgmgr in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary code via a long directory path argument.

CVE-2003-0954 [HIGH] CVE-2003-0954: Buffer overflow in rcp for AIX 4.3.3, 5.1 and 5.2 allows local users to gain privileges. Buffer overflow in rcp for AIX 4.3.3, 5.1 and 5.2 allows local users to gain privileges.

CVE-2002-1548 [HIGH] CVE-2002-1548: Unknown vulnerability in autofs on AIX 4.3.0, when using executable maps, allows attackers to execut Unknown vulnerability in autofs on AIX 4.3.0, when using executable maps, allows attackers to execute arbitrary commands as root, possibly related to "string handling around how the executable map is called."

CVE-2003-0257 [HIGH] CVE-2003-0257: Format string vulnerability in the printer capability for IBM AIX .3, 5.1, and 5.2 allows local user Format string vulnerability in the printer capability for IBM AIX .3, 5.1, and 5.2 allows local users to gain printq or root privileges.

CVE-2009-3516 [HIGH] CWE-255 CVE-2009-3516: gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerbe gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors.

CVE-1999-1487 [HIGH] CVE-1999-1487: Vulnerability in digest in AIX 4.3 allows printq users to gain root privileges by creating and/or mo Vulnerability in digest in AIX 4.3 allows printq users to gain root privileges by creating and/or modifing any file on the system.

CVE-2008-2515 [HIGH] CWE-264 CVE-2008-2515: Unspecified vulnerability in iostat in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileg Unspecified vulnerability in iostat in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via unknown vectors related to an "environment variable handling error."

CVE-1999-1574 [HIGH] CVE-1999-1574: Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execute arbitrary code via "long input strings."

CVE-2002-0746 [CRITICAL] CVE-2002-0746: Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument. Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument.

CVE-2002-0743 [CRITICAL] CVE-2002-0743: mail and mailx in AIX 4.3.3 core dump when called with a very long argument, an indication of a buff mail and mailx in AIX 4.3.3 core dump when called with a very long argument, an indication of a buffer overflow.

CVE-2002-1690 [CRITICAL] CVE-2002-1690: Unknown vulnerability in AIX before 4.0 with unknown attack vectors and unknown impact, aka "securit Unknown vulnerability in AIX before 4.0 with unknown attack vectors and unknown impact, aka "security issue," as fixed by APAR IY28225.

CVE-2004-0243 [MEDIUM] CWE-203 CVE-2004-0243: AIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if the AIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if the password is correct, which allows remote attackers to guess the password via brute force methods.

CVE-1999-1121 [HIGH] CVE-1999-1121: The default configuration for UUCP in AIX before 3.2 allows local users to gain root privileges. The default configuration for UUCP in AIX before 3.2 allows local users to gain root privileges.

CVE-1999-0627 [NONE] CVE-1999-0627: The rexd service is running, which uses weak authentication that can allow an attacker to execute co The rexd service is running, which uses weak authentication that can allow an attacker to execute commands.

CVE-1999-0318 [HIGH] CVE-1999-0318: Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable. Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable.

CVE-2000-0466 [HIGH] CVE-2000-0466: AIX cdmount allows local users to gain root privileges via shell metacharacters. AIX cdmount allows local users to gain root privileges via shell metacharacters.

CVE-2006-4416 [HIGH] CVE-2006-4416: Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious (1) chdev, (2) mkboot, (3) varyonvg, or (4) varyoffvg program.

CVE-2008-1596 [HIGH] CVE-2008-1596: Trusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the trustchk_block Trusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the trustchk_block_write function, which might allow local users to modify trusted files, related to missing checks in the TSD_FILES_LOCK policy for modifications performed via hard links, a different vulnerability than CVE-2007-6680.

CVE-1999-1552 [HIGH] CVE-1999-1552: dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check pri dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check privileges, which allows local users to overwrite arbitrary files and gain privileges.

CVE-2003-1018 [HIGH] CVE-2003-1018: Format string vulnerability in enq command in AIX 4.3, 5.1, and 5.2 allows local users with rintq gr Format string vulnerability in enq command in AIX 4.3, 5.1, and 5.2 allows local users with rintq group privileges to gain privileges via unknown attack vectors.