Vulnerabilities > IBM > AIX > 6.1

DATE CVE VULNERABILITY TITLE RISK
2013-06-21 CVE-2013-3035 Improper Input Validation vulnerability in IBM AIX and Vios
The IPv6 implementation in the inet subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allows remote attackers to cause a denial of service (system hang) via a crafted packet to an IPv6 interface.
network
ibm CWE-20
7.1
2012-10-20 CVE-2012-4845 Permissions, Privileges, and Access Controls vulnerability in IBM AIX and Vios
The FTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly manage privileges in an RBAC environment, which allows attackers to bypass intended file-read restrictions by leveraging the setuid installation of the ftp executable file.
network
low complexity
ibm CWE-264
6.8
2012-10-01 CVE-2012-4833 Permissions, Privileges, and Access Controls vulnerability in IBM AIX and Vios
fuser in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly restrict the -k option, which allows local users to kill arbitrary processes via a crafted command line.
local
low complexity
ibm CWE-264
2.1
2012-09-14 CVE-2012-4817 Unspecified vulnerability in IBM AIX and Vios
The NFSv4 client implementation in IBM AIX 5.3, 6.1, and 7.1, and VIOS before 2.2.1.4-FP-25 SP-02, does not properly handle GID values, which allows remote attackers to cause a denial of service via unspecified vectors.
network
low complexity
ibm
5.0
2012-07-30 CVE-2012-0723 Improper Input Validation vulnerability in IBM AIX and Vios
The kernel in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly implement the dupmsg system call, which allows local users to cause a denial of service (system crash) via a crafted application.
local
low complexity
ibm CWE-20
4.9
2012-06-27 CVE-2012-2200 Permissions, Privileges, and Access Controls vulnerability in IBM AIX and Vios
The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain privileges by entering a command in a .forward file in a home directory.
local
low complexity
ibm CWE-264
7.2
2012-06-22 CVE-2012-2179 Permissions, Privileges, and Access Controls vulnerability in IBM AIX 5.3/6.1/7.1
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
local
ibm CWE-264
6.9
2012-06-20 CVE-2012-2192 Resource Management Errors vulnerability in IBM AIX and Vios
The socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local users to cause a denial of service (system crash) via a crafted application that leverages the presence of a socket on the free list.
local
low complexity
ibm CWE-399
4.9
2012-05-04 CVE-2012-0745 Permissions, Privileges, and Access Controls vulnerability in IBM AIX and Vios
The getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not properly interact with customer-extended LDAP user filtering, which allows local users to gain privileges via unspecified vectors.
local
low complexity
ibm CWE-264
7.2
2012-03-02 CVE-2011-1385 Resource Management Errors vulnerability in IBM AIX and Vios
IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.1.x and 2.2.x, allows remote attackers to cause a denial of service (system crash) via an ICMP Echo Reply packet that contains 1 in the Identifier field, a different vulnerability than CVE-2012-0194.
network
low complexity
ibm CWE-399
7.8