AI
Product
AIX
545
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 49High 111Medium 63Low 9
Watch
Add AIX to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-0588 | – | Feb 5 | Buffer overflow in the utape program in devices.scsi.tape.diag in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors Affected: 5.2; 5.3 |
| CVE-2008-0587 | – | Feb 5 | Buffer overflow in the uspchrp program in devices.chrp.base.diag in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors Affected: 5.2; 5.3 |
| CVE-2008-0586 | – | Feb 5 | Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to the (1) lchangevg, (2) ldeletepv, (3) putlvodm, (4)… Affected: 5.2; 5.3 |
| CVE-2008-0585 | – | Feb 5 | sysmgt.websm.webaccess in IBM AIX 5.2 and 5.3 has world writable permissions for unspecified WebSM Remote Client files, which allows local users to "alter the behavior of" this… Affected: 5.2; 5.3 |
| CVE-2008-0509 | – | Jan 31 | Multiple buffer overflows in IBM AIX 4.3 allow remote attackers to cause a denial of service (crash) or possibly gain privileges via a long argument to (1) piox25, related to… Affected: 4.3 |
| CVE-2007-5764 | – | Jan 25 | Buffer overflow in the pioout program in printers.rte in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via a long command line option Affected: 5.2; 5.3; 6.1 |
| CVE-2007-6680 | – | Jan 10 | Trusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the trustchk_block_write function, which might allow local users to modify trusted files, related… Affected: 6.1 |
| CVE-2007-5804 | – | Nov 5 | cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create or overwrite an… Affected: 5.2; 5.3 |
| CVE-2007-5805 | – | Nov 5 | cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an arbitrary file, and… Affected: 5.2; 5.3 |
| CVE-2007-4513 | – | Nov 5 | Multiple stack-based buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges via a long argument to the (1) "-p" option to lqueryvg or (2) the "-V" option to… Affected: 5.2; 5.3 |
| CVE-2007-4217 | – | Nov 5 | Stack-based buffer overflow in the domacro function in ftp in IBM AIX 5.2 and 5.3 allows local users to gain privileges via a long parameter to a macro, as demonstrated by… Affected: 5.2; 5.3 |
| CVE-2007-4623 | – | Nov 5 | Stack-based buffer overflow in the sendrmt function in bellmail in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via a long parameter to the m command Affected: 5.2; 5.3 |
| CVE-2007-4622 | – | Nov 5 | Integer underflow in the dns_name_fromtext function in (1) libdns_nonsecure.a and (2) libdns_secure.a in IBM AIX 5.2 allows local users to gain privileges via a crafted "-y" (TSIG… Affected: 5.2 |
| CVE-2007-4621 | – | Nov 5 | Buffer overflow in crontab in IBM AIX 5.2 allows local users to gain privileges via long command line arguments Affected: 5.2 |
| CVE-2007-4795 | – | Sep 10 | Buffer overflow in mkpath in bos.rte.methods in IBM AIX 5.2 and 5.3 allows local users to gain privileges via a long ODM name Affected: 5.2; 5.3 |
| CVE-2007-4794 | – | Sep 10 | Buffer overflow in fcstat in devices.common.IBM.fc.rte in IBM AIX 5.2 and 5.3 allows local users to gain privileges via a long input parameter Affected: 5.2; 5.3 |
| CVE-2007-4793 | – | Sep 10 | Buffer overflow in xlplm in plm.server.rte in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors Affected: 5.2; 5.3 |
| CVE-2007-4791 | – | Sep 10 | Buffer overflow in the swcons command in bos.rte.console in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than… Affected: 5.2; 5.3 |
| CVE-2007-4792 | – | Sep 10 | Buffer overflow in ibstat in devices.common.IBM.ib.rte in IBM AIX 5.3 allows local users to gain privileges via unspecified vectors Affected: 5.3 |
| CVE-2007-4799 | – | Sep 10 | The perfstat kernel extension in bos.perf.perfstat in AIX 5.3 does not verify privileges when processing a SET call, which allows local users to cause a denial of service (system… Affected: 5.3 |
| CVE-2007-4798 | – | Sep 10 | Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final… Affected: 5.2; 5.3 |
| CVE-2007-4797 | – | Sep 10 | Multiple buffer overflows in unspecified svprint (System V print) commands in bos.svprint.rte in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors Affected: 5.2; 5.3 |
| CVE-2007-4796 | – | Sep 10 | Buffer overflow in uucp in bos.net.uucp in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors Affected: 5.2; 5.3 |
| CVE-2007-4354 | – | Aug 15 | Buffer overflow in fileplace in bos.perf.tools in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors Affected: 5.2; 5.3 |
| CVE-2007-4355 | – | Aug 15 | Buffer overflow in the at program on IBM AIX 5.3 allows local users to gain privileges via unspecified vectors Affected: 5.3 |
| CVE-2007-4353 | – | Aug 15 | Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain root privileges via unspecified vectors involving the (1) chpath, (2) rmpath, and… Affected: 5.2; 5.3 |
| CVE-2007-4236 | – | Aug 8 | Buffer overflow in lpd in bos.rte.printers in AIX 5.2 and 5.3 allows local users with printq group privileges to gain root privileges Affected: 5.2; 5.3 |
| CVE-2007-4238 | – | Aug 8 | AIX 5.2 and 5.3 install pioinit with user and group ownership of bin, which allows local users with bin or possibly printq privileges to gain root privileges by modifying pioinit Affected: 5.2; 5.3 |
| CVE-2007-4237 | – | Aug 8 | Buffer overflow in the atm subset in arp in devices.common.IBM.atm.rte in AIX 5.2 and 5.3 allows local users to gain root privileges Affected: 5.2; 5.3 |
| CVE-2007-4228 | – | Aug 8 | rmpvc on IBM AIX 4.3 allows local users to cause a denial of service (system crash) via long port logical name (-l) argument Affected: 4.3 |
| CVE-2007-3333 | – | Jul 26 | Stack-based buffer overflow in capture in IBM AIX 5.3 SP6 and 5.2.0 allows remote attackers to execute arbitrary code via a large number of terminal control sequences Affected: 5.2.0; 5.3 |
| CVE-2007-4004 | – | Jul 26 | Buffer overflow in the ftp client in IBM AIX 5.3 SP6 and 5.2.0 allows local users to execute arbitrary code via unspecified vectors that trigger the overflow in a gets function… Affected: 5.2.0; 5.3 |
| CVE-2007-4003 | – | Jul 26 | pioout in IBM AIX 5.3 SP6 allows local users to execute arbitrary code by specifying a malicious library with the -R (ParseRoutine) command line argument Affected: 5.3 |
| CVE-2007-3680 | – | Jul 11 | Stack-based buffer overflow in the odm_searchpath function in libodm in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary code via a long ODMPATH environment… Affected: 5.2.0; 5.3.0 |
| CVE-2007-2995 | – | Jun 4 | Unspecified vulnerability in sysmgt.websm.rte in IBM AIX 5.2.0 and 5.3.0 has unknown impact and attack vectors Affected: 5.2.0; 5.3 |
| CVE-2007-2996 | – | Jun 4 | Unspecified vulnerability in perl.rte 5.8.0.10 through 5.8.0.95 on IBM AIX 5.2, and 5.8.2.10 through 5.8.2.50 on AIX 5.3, allows local users to gain privileges via unspecified… Affected: 5.2; 5.3 |
| CVE-2007-1798 | – | Apr 2 | Buffer overflow in the drmgr command in IBM AIX 5.2 and 5.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long path name Affected: 5.2; 5.3 |
| CVE-2007-0978 | – | Feb 16 | Buffer overflow in swcons in IBM AIX 5.3 allows local users to gain privileges via long input data Affected: 5.3 |
| CVE-2007-0670 | – | Feb 3 | Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands", possibly including (1) rdist, (2) rsh, (3) rcp, (4)… Affected: 5.2; 5.3 |
| CVE-2007-0618 | – | Jan 31 | Unspecified vulnerability in (1) pop3d, (2) pop3ds, (3) imapd, and (4) imapds in IBM AIX 5.3.0 has unspecified impact and attack vectors, involving an "authentication… Affected: 5.3.0 |
| CVE-2007-0392 | – | Jan 19 | IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and… Affected: 5.3 |
| CVE-2006-6914 | – | Dec 31 | Unspecified vulnerability in ftpd in IBM AIX 5.2.0 and 5.3.0 allows remote attackers to obtain sensitive information, including passwords, via unspecified vectors Affected: 5.2.0; 5.3.0 |
| CVE-2006-6915 | – | Dec 31 | ftpd in IBM AIX 5.2.0 and 5.3.0 allows remote authenticated users to cause a denial of service (port exhaustion) via unspecified vectors Affected: 5.2.0; 5.3.0 |
| CVE-2006-5003 | – | Sep 27 | Unspecified vulnerability in the named8 command in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands via unspecified vectors Affected: 5.2.0; 5.3.0 |
| CVE-2006-5011 | – | Sep 27 | Untrusted search path vulnerability in snappd in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands via a Trojan horse program, involving the "system… Affected: 5.2.0; 5.3.0 |
| CVE-2006-5010 | – | Sep 27 | Untrusted search path vulnerability in acctctl in IBM AIX 5.3.0 allows local users to execute arbitrary commands by modifying the path to point to a malicious mkdir program Affected: 5.3.0 |
| CVE-2006-5009 | – | Sep 27 | Unspecified vulnerability in xlock in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands and overwrite arbitrary files via unspecified vectors, possibly… Affected: 5.2.0; 5.3.0 |
| CVE-2006-5008 | – | Sep 27 | Unspecified vulnerability in utape in IBM AIX 5.2.0 and 5.3.0 allows attackers to execute arbitrary commands and overwrite arbitrary files via unspecified vectors Affected: 5.2.0; 5.3.0 |
| CVE-2006-5007 | – | Sep 27 | Untrusted search path vulnerability in uucp in IBM AIX 5.2.0 and 5.3.0 allows local users to local users to gain privileges via a Trojan horse program involving uux Affected: 5.2.0; 5.3.0 |
| CVE-2006-5006 | – | Sep 27 | Buffer overflow in cfgmgr in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary code via a long directory path argument Affected: 5.2.0; 5.3.0 |
The 500 most important CVEs for this product (exploited first, then by severity)