Vulnerabilities > IBM > Critical

DATE CVE VULNERABILITY TITLE RISK
2002-08-12 CVE-2002-0743 Remote Security vulnerability in IBM AIX 4.3.3
mail and mailx in AIX 4.3.3 core dump when called with a very long argument, an indication of a buffer overflow.
network
low complexity
ibm
critical
10.0
2002-08-12 CVE-2002-0742 Remote Security vulnerability in IBM AIX 4.3.3
Buffer overflow in pioout on AIX 4.3.3.
network
low complexity
ibm
critical
10.0
2002-04-22 CVE-2002-1621 Remote Security vulnerability in AIX
Buffer overflow in the file_comp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code.
network
low complexity
ibm
critical
10.0
2001-12-21 CVE-2001-1440 Authentication Module Unauthorized Access vulnerability in IBM AIX 5.1L
Unknown vulnerability in login for AIX 5.1L, when using loadable authentication modules, allows remote attackers to gain access to the system.
network
low complexity
ibm
critical
10.0
2001-12-12 CVE-2001-0797 Buffer Overflow vulnerability in Multiple Vendor System V Derived 'login'
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.
network
low complexity
sgi hp ibm sco sun
critical
10.0
2001-12-06 CVE-2001-0671 Remote Security vulnerability in AIX 4.3/5.1
Buffer overflows in (1) send_status, (2) kill_print, and (3) chk_fhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges.
network
low complexity
ibm
critical
10.0
2001-09-20 CVE-2001-0552 ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message.
network
low complexity
hp ibm
critical
10.0
2001-08-31 CVE-2001-1061 Unspecified vulnerability in IBM AIX
Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error.
network
low complexity
ibm
critical
10.0
2001-08-14 CVE-2001-0554 Classic Buffer Overflow vulnerability in multiple products
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.
network
low complexity
netkit mit sgi freebsd ibm netbsd openbsd sun debian CWE-120
critical
10.0
2000-12-31 CVE-2000-1239 Information Disclosure vulnerability in IBM Tivoli Management Framework 3.7.1
The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log files.
network
low complexity
ibm
critical
9.0