Browse CVEs

HIGH 9.0 CVE-2000-1239 The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, w… Tivoli Management Framework Mitigation only Fix from $1,9502000-12-31 HIGH 10.0 CVE-2000-0677 Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PATH_INFO environmental variable. Net.data Mitigation only Fix from $1,9502000-10-20 MEDIUM 5.0 CVE-2000-0441 Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems. Aix Mitigation only Fix from $1,6002000-05-24 HIGH 7.2 CVE-2000-0249 The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program. Aix Mitigation only Fix from $1,9502000-04-26 HIGH 7.2 CVE-2000-1216 Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine. Aix Mitigation only Fix from $1,9502000-01-27 MEDIUM 6.2 CVE-2000-0027 IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack. Network Station Manager No fix yet Fix from $1,6001999-12-27 HIGH 7.2 CVE-1999-0852 IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin. Websphere Application Server Mitigation only Fix from $1,9501999-12-02 HIGH 10.0 CVE-1999-0835 Denial of service in BIND named via malformed SIG records. Aix Mitigation only Fix from $1,9501999-11-10 HIGH 7.5 CVE-1999-0903 genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767. Aix Mitigation only Fix from $1,9501999-10-26 HIGH 10.0 CVE-1999-0789 Buffer overflow in AIX ftpd in the libc library. Aix No fix yet Fix from $1,9501999-09-28 HIGH 10.0 CVE-1999-0745 Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler. Aix No fix yet Fix from $1,9501999-08-18 HIGH 7.2 CVE-1999-1414 IBM Netfinity Remote Control allows local users to gain administrator privileges by starting programs from the process manager, which runs with syste… Netfinity Remote Control Mitigation only Fix from $1,9501999-05-25 HIGH 7.5 CVE-1999-0429 The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" prefer… Lotus Notes Mitigation only Fix from $1,9501999-03-01 HIGH 10.0 CVE-1999-1405 snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when s… Aix No fix yet Fix from $1,9501999-02-17 MEDIUM 5.0 CVE-1999-1546 netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable. Navio Nc Browser Mitigation only Fix from $1,6001999-01-29 HIGH 7.2 CVE-1999-0118 AIX infod allows local users to gain root access through an X display. Aix Mitigation only Fix from $1,9501998-11-01 HIGH 10.0 CVE-1999-0088 IRIX and AIX automountd services (autofsd) allow remote users to execute root commands. Aix Mitigation only Fix from $1,9501998-10-26 HIGH 7.2 CVE-1999-1403 IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions (world-readable and wor… Tivoli Opc Tracker Agent Mitigation only Fix from $1,9501998-10-02 MEDIUM 5.0 CVE-1999-1404 IBM/Tivoli OPC Tracker Agent version 2 release 1 allows remote attackers to cause a denial of service (resource exhaustion) via malformed data to the… Tivoli Opc Tracker Agent Mitigation only Fix from $1,6001998-10-02 HIGH 7.2 CVE-1999-0055 Buffer overflows in Sun libnsl allow root access. Aix Mitigation only Fix from $1,9501998-05-14 MEDIUM 5.0 CVE-1999-1075 inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 without passin… Aix Mitigation only Fix from $1,6001998-03-18 MEDIUM 5.0 CVE-1999-0087 Denial of service in AIX telnet can freeze a system and prevent users from accessing the server. Aix No fix yet Fix from $1,6001998-02-01 MEDIUM 5.0 CVE-1999-0086 AIX routed allows remote users to modify sensitive files. Aix Mitigation only Fix from $1,6001998-01-08 HIGH 7.5 CVE-1999-0284EPSS 12% Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command. Lotus Domino Mail Server Mitigation only Fix from $1,9501998-01-01 HIGH 7.2 CVE-1999-0092 Various vulnerabilities in the AIX portmir command allows local users to obtain root access. Aix Mitigation only Fix from $1,9501997-10-29 HIGH 7.2 CVE-1999-0093 AIX nslookup command allows local users to obtain root access by not dropping privileges correctly. Aix Mitigation only Fix from $1,9501997-10-29 HIGH 7.2 CVE-1999-0089 Buffer overflow in AIX libDtSvc library can allow local users to gain root access. Aix Mitigation only Fix from $1,9501997-10-28 HIGH 7.2 CVE-1999-0091 Buffer overflow in AIX writesrv command allows local users to obtain root access. Aix Mitigation only Fix from $1,9501997-10-28 HIGH 7.2 CVE-1999-0072 Buffer overflow in AIX xdat gives root access to local users. Aix Mitigation only Fix from $1,9501997-10-22 HIGH 7.2 CVE-1999-0090 Buffer overflow in AIX rcp command allows local users to obtain root access. Aix Mitigation only Fix from $1,9501997-10-01