Search Results (Refine Search)
- CPE Product Version: cpe:/o:ibm:aix:6.1
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2013-3035 |
The IPv6 implementation in the inet subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allows remote attackers to cause a denial of service (system hang) via a crafted packet to an IPv6 interface. Published: June 21, 2013; 10:55:01 AM -0400 |
V3.x:(not available) V2.0: 7.1 HIGH |
CVE-2012-4845 |
The FTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly manage privileges in an RBAC environment, which allows attackers to bypass intended file-read restrictions by leveraging the setuid installation of the ftp executable file. Published: October 20, 2012; 6:41:27 AM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
CVE-2012-4833 |
fuser in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly restrict the -k option, which allows local users to kill arbitrary processes via a crafted command line. Published: October 01, 2012; 2:55:01 PM -0400 |
V3.x:(not available) V2.0: 2.1 LOW |
CVE-2012-4817 |
The NFSv4 client implementation in IBM AIX 5.3, 6.1, and 7.1, and VIOS before 2.2.1.4-FP-25 SP-02, does not properly handle GID values, which allows remote attackers to cause a denial of service via unspecified vectors. Published: September 14, 2012; 7:55:15 PM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
CVE-2012-0723 |
The kernel in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly implement the dupmsg system call, which allows local users to cause a denial of service (system crash) via a crafted application. Published: July 30, 2012; 3:55:01 PM -0400 |
V3.x:(not available) V2.0: 4.9 MEDIUM |
CVE-2012-2200 |
The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain privileges by entering a command in a .forward file in a home directory. Published: June 27, 2012; 6:18:37 AM -0400 |
V3.x:(not available) V2.0: 7.2 HIGH |
CVE-2012-2179 |
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file. Published: June 22, 2012; 6:24:07 AM -0400 |
V3.x:(not available) V2.0: 6.9 MEDIUM |
CVE-2012-2192 |
The socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local users to cause a denial of service (system crash) via a crafted application that leverages the presence of a socket on the free list. Published: June 20, 2012; 6:27:28 AM -0400 |
V3.x:(not available) V2.0: 4.9 MEDIUM |
CVE-2012-0745 |
The getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not properly interact with customer-extended LDAP user filtering, which allows local users to gain privileges via unspecified vectors. Published: May 04, 2012; 12:55:01 PM -0400 |
V3.x:(not available) V2.0: 7.2 HIGH |
CVE-2011-1385 |
IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.1.x and 2.2.x, allows remote attackers to cause a denial of service (system crash) via an ICMP Echo Reply packet that contains 1 in the Identifier field, a different vulnerability than CVE-2012-0194. Published: March 02, 2012; 5:55:01 PM -0500 |
V3.x:(not available) V2.0: 7.8 HIGH |
CVE-2012-0194 |
The TCP implementation in IBM AIX 5.3, 6.1, and 7.1, when the Large Send Offload option is enabled, allows remote attackers to cause a denial of service (assertion failure and panic) via an unspecified series of packets. Published: February 06, 2012; 3:55:02 PM -0500 |
V3.x:(not available) V2.0: 7.1 HIGH |
CVE-2011-1384 |
The (1) bin/invscoutClient_VPD_Survey and (2) sbin/invscout_lsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout operations on arbitrary files, via a symlink attack on an unspecified file. Published: January 03, 2012; 10:55:04 PM -0500 |
V3.x:(not available) V2.0: 4.0 MEDIUM |
CVE-2011-1375 |
IBM AIX 6.1 and 7.1 does not restrict the wpar_limits_config and wpar_limits_modify system calls, which allows local users to cause a denial of service (system crash) via a crafted call. Published: November 11, 2011; 4:55:00 PM -0500 |
V3.x:(not available) V2.0: 4.9 MEDIUM |
CVE-2011-3982 |
The Fibre Channel driver for QLogic adapters in IBM AIX 6.1 and 7.1 does not properly handle DMA resource limitations, which allows local users to cause a denial of service (system hang) via vectors that generate a large amount of DMA I/O, related to a deadlock in timer processing across CPUs. Published: October 04, 2011; 10:56:24 PM -0400 |
V3.x:(not available) V2.0: 2.1 LOW |
CVE-2011-1561 |
The LDAP login feature in bos.rte.security 6.1.6.4 in IBM AIX 6.1, when ldap_auth is enabled in ldap.cfg, allows remote attackers to bypass authentication via a login attempt with an arbitrary password. Published: April 05, 2011; 11:19:35 AM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
CVE-2011-0637 |
The FC SCSI protocol driver in IBM AIX 6.1 does not verify that a timer is unused before deallocating this timer, which might allow attackers to cause a denial of service (system crash) via unspecified vectors. Published: January 24, 2011; 8:00:02 PM -0500 |
V3.x:(not available) V2.0: 4.9 MEDIUM |
CVE-2010-3405 |
Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, and earlier allows local users to leverage system group membership and gain privileges via unspecified vectors. Published: September 16, 2010; 5:00:01 PM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
CVE-2010-1039 |
Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IRIX 6.5 allows remote attackers to execute arbitrary code via an RPC request containing format string specifiers in an invalid directory name. Published: May 20, 2010; 1:30:01 PM -0400 |
V3.x:(not available) V2.0: 10.0 HIGH |
CVE-2010-0961 |
Buffer overflow in qoslist in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors. Published: March 10, 2010; 5:30:01 PM -0500 |
V3.x:(not available) V2.0: 7.2 HIGH |
CVE-2010-0960 |
Buffer overflow in qosmod in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors. Published: March 10, 2010; 5:30:01 PM -0500 |
V3.x:(not available) V2.0: 7.2 HIGH |