Browse CVEs

HIGH 7.2 CVE-2000-1120 Buffer overflow in digest command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands. Aix Patch available Fix from $1,9502001-01-09 HIGH 7.2 CVE-2000-1121 Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long -M argument. Aix Patch available Fix from $1,9502001-01-09 HIGH 7.2 CVE-2000-1122 Buffer overflow in setclock command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long argument. Aix Patch available Fix from $1,9502001-01-09 HIGH 7.2 CVE-2000-1123 Buffer overflow in pioout command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands. Aix Patch available Fix from $1,9502001-01-09 HIGH 7.2 CVE-2000-1124 Buffer overflow in piobe command in IBM AIX 4.3.x allows local users to gain privileges via long environmental variables. Aix Patch available Fix from $1,9502001-01-09 MEDIUM 5.0 CVE-2000-1110 document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by sending a non… Net.data No fix yet Fix from $1,6002001-01-09 MEDIUM 5.0 CVE-2000-1117 The Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client R5 allows malicious web site operators to determine t… Lotus Notes No fix yet Fix from $1,6002001-01-09 HIGH 9.0 CVE-2000-1239 The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, w… Tivoli Management Framework Mitigation only Fix from $1,9502000-12-31 MEDIUM 5.0 CVE-2000-1038 The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an empty GET request. As400 Firewall Patch available Fix from $1,6002000-12-11 HIGH 7.2 CVE-2000-1222 AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by modifying t… Aix after 4.2.1.12 Fix from $1,9502000-12-10 HIGH 10.0 CVE-2000-0848EPSS 6% Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host: request header. Websphere Application Server Patch available Fix from $1,9502000-11-14 HIGH 10.0 CVE-2000-0677 Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PATH_INFO environmental variable. Net.data Mitigation only Fix from $1,9502000-10-20 MEDIUM 5.0 CVE-2000-0761 OS2/Warp 4.5 FTP server allows remote attackers to cause a denial of service via a long username. Os2 Ftp Server Patch available Fix from $1,6002000-10-20 MEDIUM 5.0 CVE-2000-0652EPSS 8% IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which c… Websphere Application Server Patch available Fix from $1,6002000-07-24 HIGH 7.2 CVE-2000-0466 AIX cdmount allows local users to gain root privileges via shell metacharacters. Aix Patch available Fix from $1,9502000-06-20 HIGH 7.5 CVE-2000-0497 IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in uppe… Websphere Application Server Patch available Fix from $1,9502000-06-08 MEDIUM 5.0 CVE-2000-0441 Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems. Aix Mitigation only Fix from $1,6002000-05-24 HIGH 7.2 CVE-2000-0249 The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program. Aix Mitigation only Fix from $1,9502000-04-26 HIGH 7.2 CVE-2000-1216 Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine. Aix Mitigation only Fix from $1,9502000-01-27 HIGH 7.2 CVE-1999-1589 Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors. Aix Patch available Fix from $1,9501999-12-31 MEDIUM 5.0 CVE-1999-1488 sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication. System Data Repository Patch available Fix from $1,6001999-12-31 MEDIUM 6.2 CVE-2000-0027 IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack. Network Station Manager No fix yet Fix from $1,6001999-12-27 HIGH 7.2 CVE-1999-0852 IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin. Websphere Application Server Mitigation only Fix from $1,9501999-12-02 HIGH 10.0 CVE-1999-0835 Denial of service in BIND named via malformed SIG records. Aix Mitigation only Fix from $1,9501999-11-10 HIGH 7.5 CVE-1999-1531 Buffer overflow in IBM HomePagePrint 1.0.7 for Windows98J allows a malicious Web site to execute arbitrary code on a viewer's system via a long IMG_S… Homepageprint Patch available Fix from $1,9501999-11-02 HIGH 7.5 CVE-1999-0903 genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767. Aix Mitigation only Fix from $1,9501999-10-26 HIGH 7.2 CVE-1999-1583 Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument. Aix Patch available Fix from $1,9501999-09-30 HIGH 10.0 CVE-1999-0789 Buffer overflow in AIX ftpd in the libc library. Aix No fix yet Fix from $1,9501999-09-28 HIGH 7.2 CVE-1999-1013 named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and a malform… Aix Patch available Fix from $1,9501999-09-23 HIGH 10.0 CVE-1999-0745 Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler. Aix No fix yet Fix from $1,9501999-08-18