AI
Product
AIX
545
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 49High 111Medium 63Low 9
Watch
Add AIX to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-5005 | – | Sep 27 | Unspecified vulnerability in bos.net.tcp.client in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands via unspecified vectors involving /etc/slip.login Affected: 5.2.0; 5.3.0 |
| CVE-2006-5004 | – | Sep 27 | Unspecified vulnerability in the rdist command in IBM AIX 5.2.0 and 5.3.0 allows local users to overwrite arbitrary files via unspecified vectors Affected: 5.2.0; 5.3.0 |
| CVE-2006-4522 | – | Sep 1 | Unspecified vulnerability in dtterm in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code with root privileges via unspecified vectors Affected: 5.2; 5.3 |
| CVE-2006-4416 | – | Aug 28 | Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious (1) chdev, (2)… Affected: 5.1; 5.2; 5.3 |
| CVE-2006-4254 | – | Aug 21 | Unspecified vulnerability in setlocale in IBM AIX 5.1.0 through 5.3.0 allows local users to gain privileges via unspecified vectors Affected: 5.1; 5.2; 5.3 |
| CVE-2006-2647 | – | May 30 | Untrusted search path vulnerability in update_flash for IBM AIX 5.1, 5.2 and 5.3 allows local users to execute arbitrary commands via unknown vectors involving lsmcode and… Affected: 5.1; 5.2; 5.3 |
| CVE-2006-1247 | – | Apr 19 | rm_mlcache_file in bos.rte.install in AIX 5.1.0 through 5.3.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files Affected: 5.1; 5.1l; 5.2; 5.2.0.50; 5.2.0.54; 5.2.2; +7 more |
| CVE-2006-1246 | – | Mar 17 | Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due to an… Affected: 5.3 |
| CVE-2006-0667 | – | Mar 10 | lscfg in IBM AIX 5.2 and 5.3 allows local users to modify arbitrary files via a symlink attack Affected: 5.2; 5.3 |
| CVE-2006-0666 | – | Feb 15 | Unspecified vulnerability in the (1) unix_mp and (2) unix_64 kernels in IBM AIX 5.3 VRMF 5.3.0.30 through 5.3.0.33 allows local users to cause a denial of service (system crash)… Affected: 5.3; 5.3_l |
| CVE-2006-0674 | – | Feb 13 | Buffer overflow in the arp command of IBM AIX 5.3 L, 5.3, 5.2.2, 5.2 L, and 5.2 allows local users to cause a denial of service (crash) via a long iftype argument Affected: 5.2; 5.2.2; 5.2_l; 5.3; 5.3_l |
| CVE-2006-0133 | – | Jan 9 | Multiple directory traversal vulnerabilities in AIX 5.3 ML03 allow local users to determine the existence of files and read partial contents of certain files via a Affected: 5.3_ml03 |
| CVE-2005-4272 | – | Dec 15 | Multiple buffer overflows in IBM AIX 5.1, 5.2, and 5.3 allow remote attackers to execute arbitrary code via (1) muxatmd and (2) slocal Affected: 5.1; 5.1l; 5.2; 5.2.2; 5.2_l; 5.3; +1 more |
| CVE-2005-4273 | – | Dec 15 | Multiple unspecified vulnerabilities in (1) getShell and (2) getCommand in IBM AIX 5.3 allow local users to append to arbitrary files Affected: 5.3; 5.3_l |
| CVE-2005-4271 | – | Dec 15 | Buffer overflow in the malloc debug system in IBM AIX 5.3 allows local users to execute arbitrary code Affected: 5.3; 5.3_l |
| CVE-2005-4068 | – | Dec 8 | Unspecified "absolute path vulnerability" in umountall in IBM AIX 5.1 through 5.3 allows local users to cause unknown impact via unknown vectors Affected: 5.1; 5.2; 5.3 |
| CVE-2005-3749 | – | Nov 22 | Unspecified "absolute path vulnerabilities" in the diagela command (diagela.sh) in IBM AIX 5.2 and 5.3 have unknown impact and attack vectors Affected: 5.2; 5.3 |
| CVE-2005-3504 | – | Nov 5 | Buffer overflow in swcons in IBM AIX 5.2, when debug malloc is enabled, allows remote attackers to cause a core dump and possibly execute arbitrary code Affected: 5.2; 5.2.2; 5.2_l |
| CVE-2005-3396 | – | Nov 1 | Buffer overflow in the chcons (chcon) command in IBM AIX 5.2 and 5.3, when DEBUG MALLOC is enabled, might allow attackers to execute arbitrary code via a long command line… Affected: 5.1; 5.1l; 5.2; 5.2.2; 5.2_l; 5.3; +1 more |
| CVE-2005-3289 | – | Oct 23 | LSCFG in IBM AIX 5.2 and 5.3 does not create temporary files securely, which allows local users to corrupt /etc/passwd and possibly other system files via the trace file Affected: 5.2; 5.3 |
| CVE-2005-3060 | – | Sep 30 | Buffer overflow in getconf in IBM AIX 5.2 to 5.3 allows local users to execute arbitrary code via unknown vectors Affected: 5.2; 5.3 |
| CVE-2005-2232 | – | Jul 12 | Buffer overflow in invscout in IBM AIX 5.1.0 through 5.3.0 might allow local users to execute arbitrary code via a long command line argument Affected: 5.1; 5.2; 5.3 |
| CVE-2005-2238 | – | Jul 12 | ftpd in IBM AIX 5.1, 5.2 and 5.3 allows remote authenticated users to cause a denial of service (port exhaustion and memory consumption) by using all ephemeral ports Affected: 5.1; 5.2; 5.3 |
| CVE-2005-2236 | – | Jul 12 | Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via format strings in command… Affected: 5.3 |
| CVE-2005-2235 | – | Jul 12 | Buffer overflow in the diagTasksWebSM command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long command line arguments Affected: 5.1; 5.1l; 5.2; 5.2.2; 5.2_l; 5.3; +1 more |
| CVE-2005-2233 | – | Jul 12 | Buffer overflow in multiple "p" commands in IBM AIX 5.1, 5.2 and 5.3 might allow local users to execute arbitrary code via long command line arguments to (1) penable or other… Affected: 5.1; 5.1l; 5.2; 5.2.2; 5.2_l; 5.3; +1 more |
| CVE-2005-0240 | – | May 2 | Format string vulnerability in chdev on IBM AIX 5.2 allows local users to execute arbitrary code via format string specifiers in a command line argument, which is not properly… Affected: 5.2 |
| CVE-2005-1176 | – | May 2 | Race condition in JFS2 on AIX 5.2 and 5.3, when deleting a file while I/O is still occurring for that file, may write data to a different file, which could leak sensitive… Affected: 5.2.0.50; 5.2.0.54; 5.3.0.10; 5.3.0.20 |
| CVE-2005-1037 | – | May 2 | Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges Affected: 5.3.0 |
| CVE-2005-0263 | – | May 2 | Buffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -O argument Affected: 5.1; 5.2; 5.3 |
| CVE-2005-0262 | – | May 2 | Buffer overflow in ipl_varyon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -d argument Affected: 5.1; 5.2; 5.3 |
| CVE-2005-0250 | – | May 2 | Format string vulnerability in auditselect on IBM AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via format string specifiers in a command line argument Affected: 5.1; 5.2; 5.3 |
| CVE-2005-0261 | – | Feb 10 | lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which allows local users to read one line of arbitrary files Affected: 5.2; 5.3 |
| CVE-2005-0156 | – | Feb 7 | Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG… Affected: 5.2; 5.3 |
| CVE-2004-1054 | – | Jan 10 | Untrusted execution path vulnerability in invscout in IBM AIX 5.1.0, 5.2.0, and 5.3.0 allows local users to gain privileges by modifying the PATH environment variable to point to… Affected: 5.1; 5.1l; 5.2; 5.2.2; 5.2_l; 5.3; +1 more |
| CVE-2004-1028 | – | Jan 10 | Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modifying the PATH environment variable to… Affected: 5.1; 5.1l; 5.2; 5.2.2; 5.2_l; 5.3; +1 more |
| CVE-2004-1330 | – | Dec 31 | Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username Affected: 5.2; 5.2.2; 5.2_l; 5.3; 5.3_l |
| CVE-2004-2697 | – | Dec 31 | The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack on a command line argument (log file) Affected: 4.3.3; 5.1; 5.1l |
| CVE-2004-2388 | – | Dec 31 | rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the structure to be overwritten by the authenticate function… Affected: 4.3.3 |
| CVE-2004-2312 | – | Dec 31 | Buffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain privileges via a long CC argument Affected: 4.3.3 |
| CVE-2004-1329 | – | Dec 20 | Untrusted execution path vulnerability in the diag commands (1) lsmcode, (2) diag_exec, (3) invscout, and (4) invscoutd in AIX 5.1 through 5.3 allows local users to execute… Affected: 5.1; 5.1l; 5.2; 5.2.2; 5.2_l; 5.3; +1 more |
| CVE-2004-0243 | – | Nov 23 | AIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if the password is correct, which allows remote attackers to guess the password via… Affected: 4.3.3 through 5.1 |
| CVE-2004-0828 | – | Nov 3 | The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before executing the -f option, which allows local users to modify or… Affected: 5.2; 5.3 |
| CVE-2004-0545 | – | Aug 6 | LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack Affected: 5.1; 5.2 |
| CVE-2004-0544 | – | Aug 6 | Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands Affected: 4.3.3; 5.1; 5.2 |
| CVE-2004-0368 | – | May 4 | Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet Affected: 4.3.3; 5.1; 5.2 |
| CVE-2003-0257 | – | Apr 15 | Format string vulnerability in the printer capability for IBM AIX .3, 5.1, and 5.2 allows local users to gain printq or root privileges Affected: 4.3; 4.3.1; 4.3.2; 4.3.3; 5.1; 5.2 |
| CVE-2003-1018 | – | Mar 29 | Format string vulnerability in enq command in AIX 4.3, 5.1, and 5.2 allows local users with rintq group privileges to gain privileges via unknown attack vectors Affected: 4.3.3; 5.1; 5.2 |
| CVE-2003-0170 | – | Mar 29 | Unknown vulnerability in ftpd in IBM AIX 5.2, when configured to use Kerberos 5 for authentication, allows remote attackers to gain privileges via unknown attack vectors Affected: 5.2 |
| CVE-2003-0119 | – | Feb 3 | The secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with the loadmodule, which allows remote attackers to directly connect to the daemon and… Affected: 4.3.3; 5.1; 5.2 |
The 500 most important CVEs for this product (exploited first, then by severity)