Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Aix
Total 795 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-1437 6 Bea, Hp, Ibm and 3 more 8 Weblogic Server, Hp-ux, Aix and 5 more 2025-04-03 2.1 LOW N/A
BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keystore is used to store a private key or trust certificate authorities, which allows local users to gain access.
CVE-1999-0122 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
Buffer overflow in AIX lchangelv gives root access.
CVE-1999-0835 3 Ibm, Sco, Sun 4 Aix, Openserver, Unixware and 1 more 2025-04-03 10.0 HIGH N/A
Denial of service in BIND named via malformed SIG records.
CVE-2001-1096 1 Ibm 1 Aix 2025-04-03 4.6 MEDIUM N/A
Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code.
CVE-2006-0133 1 Ibm 1 Aix 2025-04-03 3.6 LOW N/A
Multiple directory traversal vulnerabilities in AIX 5.3 ML03 allow local users to determine the existence of files and read partial contents of certain files via a .. (dot dot) in the argument to (1) getCommand.new (aka getCommand) and (2) getShell, a different vulnerability than CVE-2005-4273.
CVE-1999-0055 2 Ibm, Sun 3 Aix, Solaris, Sunos 2025-04-03 7.2 HIGH N/A
Buffer overflows in Sun libnsl allow root access.
CVE-2005-4068 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
Unspecified "absolute path vulnerability" in umountall in IBM AIX 5.1 through 5.3 allows local users to cause unknown impact via unknown vectors.
CVE-2003-0696 1 Ibm 1 Aix 2025-04-03 5.0 MEDIUM N/A
The getipnodebyname() API in AIX 5.1 and 5.2 does not properly close sockets, which allows attackers to cause a denial of service (resource exhaustion).
CVE-2000-1119 1 Ibm 1 Aix 2025-04-03 4.6 MEDIUM N/A
Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a long "x=" argument.
CVE-1999-0338 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
AIX Licensed Program Product performance tools allow local users to gain root access.
CVE-1999-0789 1 Ibm 1 Aix 2025-04-03 10.0 HIGH N/A
Buffer overflow in AIX ftpd in the libc library.
CVE-2006-4254 1 Ibm 1 Aix 2025-04-03 7.5 HIGH N/A
Unspecified vulnerability in setlocale in IBM AIX 5.1.0 through 5.3.0 allows local users to gain privileges via unspecified vectors.
CVE-1999-0040 7 Bsdi, Freebsd, Hp and 4 more 10 Bsd Os, Freebsd, Hp-ux and 7 more 2025-04-03 7.2 HIGH N/A
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
CVE-2004-1330 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username.
CVE-2003-0914 9 Compaq, Freebsd, Hp and 6 more 10 Tru64, Freebsd, Hp-ux and 7 more 2025-04-03 4.3 MEDIUM N/A
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.
CVE-2005-0156 7 Ibm, Larry Wall, Redhat and 4 more 9 Aix, Perl, Enterprise Linux and 6 more 2025-04-03 2.1 LOW N/A
Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree.
CVE-2002-0677 7 Caldera, Compaq, Hp and 4 more 9 Openunix, Unixware, Tru64 and 6 more 2025-04-03 7.5 HIGH N/A
CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.
CVE-2003-1018 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
Format string vulnerability in enq command in AIX 4.3, 5.1, and 5.2 allows local users with rintq group privileges to gain privileges via unknown attack vectors.
CVE-2002-1622 1 Ibm 1 Aix 2025-04-03 7.5 HIGH N/A
Buffer overflow in certain RPC routines in IBM AIX 4.3 may allow attackers to execute arbitrary code, related to a "variable data type."
CVE-2004-2697 1 Ibm 1 Aix 2025-04-03 6.9 MEDIUM N/A
The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack on a command line argument (log file). NOTE: this might be related to CVE-2006-5002.