Ibm Aix vulnerabilities

CVE-1999-0078 [LOW] CVE-1999-0078: pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.

CVE-1999-0208 [CRITICAL] CVE-1999-0208: rpc.ypupdated (NIS) allows remote users to execute arbitrary commands. rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.

CVE-1999-0099 [CRITICAL] CVE-1999-0099: Buffer overflow in syslog utility allows local or remote attackers to gain root privileges. Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.

CVE-1999-1552 [HIGH] CVE-1999-1552: dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check pri dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check privileges, which allows local users to overwrite arbitrary files and gain privileges.

CVE-1999-0337 [HIGH] CVE-1999-0337: AIX batch queue (bsh) allows local and remote users to gain additional privileges when network print AIX batch queue (bsh) allows local and remote users to gain additional privileges when network printing is enabled.

CVE-1999-0113 [CRITICAL] CWE-88 CVE-1999-0113: Some implementations of rlogin allow root access if given a -froot parameter. Some implementations of rlogin allow root access if given a -froot parameter.

CVE-1999-0338 [HIGH] CVE-1999-0338: AIX Licensed Program Product performance tools allow local users to gain root access. AIX Licensed Program Product performance tools allow local users to gain root access.

CVE-1999-0117 [HIGH] CVE-1999-0117: AIX passwd allows local users to gain root access. AIX passwd allows local users to gain root access.

CVE-1999-1121 [HIGH] CVE-1999-1121: The default configuration for UUCP in AIX before 3.2 allows local users to gain root privileges. The default configuration for UUCP in AIX before 3.2 allows local users to gain root privileges.

CVE-1999-0627 [NONE] CVE-1999-0627: The rexd service is running, which uses weak authentication that can allow an attacker to execute co The rexd service is running, which uses weak authentication that can allow an attacker to execute commands.