Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Aix
Total 724 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-1689 1 Ibm 1 Aix 2025-04-03 10.0 HIGH N/A
Unknown vulnerability in the login program on AIX before 4.0 could allow remote users to specify 100 or more environment variables when logging on, which exceeds the length of a certain string, possibly triggering a buffer overflow.
CVE-2006-0674 1 Ibm 1 Aix 2025-04-03 4.6 MEDIUM N/A
Buffer overflow in the arp command of IBM AIX 5.3 L, 5.3, 5.2.2, 5.2 L, and 5.2 allows local users to cause a denial of service (crash) via a long iftype argument.
CVE-1999-0687 4 Cde, Digital, Ibm and 1 more 5 Cde, Unix, Aix and 2 more 2025-04-03 7.5 HIGH N/A
The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.
CVE-2001-1096 1 Ibm 1 Aix 2025-04-03 4.6 MEDIUM N/A
Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code.
CVE-1999-1075 1 Ibm 1 Aix 2025-04-03 5.0 MEDIUM N/A
inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attackers to cause a denial of service via a large number of connections to port N-1, which are not properly closed by inetd.
CVE-2002-1041 1 Ibm 1 Aix 2025-04-03 5.0 MEDIUM N/A
Unknown vulnerability in DCE (1) SMIT panels and (2) configuration commands, possibly related to relative pathnames.
CVE-2000-1216 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine.
CVE-1999-0745 1 Ibm 1 Aix 2025-04-03 10.0 HIGH N/A
Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler.
CVE-2003-0119 1 Ibm 1 Aix 2025-04-03 7.5 HIGH N/A
The secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with the loadmodule, which allows remote attackers to directly connect to the daemon and conduct unauthorized activities.
CVE-2003-1018 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
Format string vulnerability in enq command in AIX 4.3, 5.1, and 5.2 allows local users with rintq group privileges to gain privileges via unknown attack vectors.
CVE-1999-0038 7 Bsdi, Data General, Debian and 4 more 8 Bsd Os, Dg Ux, Debian Linux and 5 more 2025-04-03 7.2 HIGH 8.4 HIGH
Buffer overflow in xlock program allows local users to execute commands as root.
CVE-1999-0628 4 Freebsd, Ibm, Linux and 1 more 4 Freebsd, Aix, Linux Kernel and 1 more 2025-04-03 5.0 MEDIUM N/A
The rwho/rwhod service is running, which exposes machine status and user information.
CVE-1999-0041 5 Cray, Gnu, Ibm and 2 more 6 Unicos, Unicos Max, Libc and 3 more 2025-04-03 7.5 HIGH N/A
Buffer overflow in NLS (Natural Language Service).
CVE-1999-0118 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
AIX infod allows local users to gain root access through an X display.
CVE-1999-0094 1 Ibm 1 Aix 2025-04-03 4.6 MEDIUM N/A
AIX piodmgrsu command allows local users to gain additional group privileges.
CVE-2005-3749 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
Unspecified "absolute path vulnerabilities" in the diagela command (diagela.sh) in IBM AIX 5.2 and 5.3 have unknown impact and attack vectors.
CVE-2005-2236 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via format strings in command line arguments.
CVE-2001-0533 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
Buffer overflow in libi18n library in IBM AIX 5.1 and 4.3.x allows local users to gain root privileges via a long LANG environmental variable.
CVE-2001-1061 1 Ibm 1 Aix 2025-04-03 10.0 HIGH N/A
Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error.
CVE-1999-0513 7 Digital, Freebsd, Hp and 4 more 8 Unix, Freebsd, Hp-ux and 5 more 2025-04-03 5.0 MEDIUM N/A
ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.