Vulnerabilities > IBM

DATE CVE VULNERABILITY TITLE RISK
1999-09-13 CVE-1999-0691 Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.
local
low complexity
cde digital ibm sun
7.2
1999-09-13 CVE-1999-0687 The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.
network
low complexity
cde digital ibm sun
7.5
1999-08-18 CVE-1999-0745 Unspecified vulnerability in IBM AIX
Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler.
network
low complexity
ibm
critical
10.0
1999-08-11 CVE-1999-0694 Unspecified vulnerability in IBM AIX 4.2/4.3
Denial of service in AIX ptrace system call allows local users to crash the system.
local
low complexity
ibm
2.1
1999-05-25 CVE-1999-1414 Unspecified vulnerability in IBM Netfinity Remote Control
IBM Netfinity Remote Control allows local users to gain administrator privileges by starting programs from the process manager, which runs with system level privileges.
local
low complexity
ibm
7.2
1999-05-25 CVE-1999-0803 Unspecified vulnerability in IBM AIX Enetwork Firewall 3.2/3.3
The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack.
local
low complexity
ibm
2.1
1999-05-06 CVE-1999-1079 Unspecified vulnerability in IBM AIX
Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program.
local
low complexity
ibm
4.6
1999-03-01 CVE-1999-0429 Unspecified vulnerability in IBM Lotus Notes 4.5
The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference.
network
low complexity
ibm
7.5
1999-02-17 CVE-1999-1405 Unspecified vulnerability in IBM AIX
snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap -a.
network
low complexity
ibm
critical
10.0
1999-01-29 CVE-1999-1546 Unspecified vulnerability in IBM Navio NC Browser 1.1.0.1
netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable.
network
low complexity
ibm
5.0