Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument

Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a long "x=" argument

Buffer overflow in piobe command in IBM AIX 4.3.x allows local users to gain privileges via long environmental variables

Buffer overflow in pioout command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands

Buffer overflow in setclock command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long argument

Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long -M argument

Buffer overflow in digest command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands

AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by modifying the path to point to a…

netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and possibly hide evidence of unusual…

Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via…

AIX cdmount allows local users to gain root privileges via shell metacharacters

Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems

The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program

Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges

Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine

AIX techlibss allows local users to overwrite files via a symlink attack

Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors

lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter

Denial of service in BIND named via naptr

Denial of service in BIND named via malformed SIG records

genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767

Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument

Buffer overflow in AIX ftpd in the libc library

named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and a malformed zone file

The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands

Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name

Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler

Denial of service in AIX ptrace system call allows local users to crash the system

Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program

snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which…

Vacation program allows command execution by remote users through a sendmail command

AIX infod allows local users to gain root access through an X display

IRIX and AIX automountd services (autofsd) allow remote users to execute root commands

Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execute arbitrary code via "long input strings."

(1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack

Buffer overflows in Sun libnsl allow root access

Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages

Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases

Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd)

inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 without passing control to ttdbserver, which…

sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack

Denial of service in AIX telnet can freeze a system and prevent users from accessing the server

Vulnerability in digest in AIX 4.3 allows printq users to gain root privileges by creating and/or modifing any file on the system

Unauthorized privileged access or denial of service via dtappgather program in CDE

AIX routed allows remote users to modify sensitive files

ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service

FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce

Buffer overflow in statd allows root privileges

AIX nslookup command allows local users to obtain root access by not dropping privileges correctly

The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g