Vulnerabilities > IBM > Critical
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2002-08-12 | CVE-2002-0743 | Remote Security vulnerability in IBM AIX 4.3.3 mail and mailx in AIX 4.3.3 core dump when called with a very long argument, an indication of a buffer overflow. | 10.0 |
2002-08-12 | CVE-2002-0742 | Remote Security vulnerability in IBM AIX 4.3.3 Buffer overflow in pioout on AIX 4.3.3. | 10.0 |
2002-04-22 | CVE-2002-1621 | Remote Security vulnerability in AIX Buffer overflow in the file_comp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code. | 10.0 |
2001-12-21 | CVE-2001-1440 | Authentication Module Unauthorized Access vulnerability in IBM AIX 5.1L Unknown vulnerability in login for AIX 5.1L, when using loadable authentication modules, allows remote attackers to gain access to the system. | 10.0 |
2001-12-12 | CVE-2001-0797 | Buffer Overflow vulnerability in Multiple Vendor System V Derived 'login' Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin. | 10.0 |
2001-12-06 | CVE-2001-0671 | Remote Security vulnerability in AIX 4.3/5.1 Buffer overflows in (1) send_status, (2) kill_print, and (3) chk_fhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges. | 10.0 |
2001-09-20 | CVE-2001-0552 | ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message. | 10.0 |
2001-08-31 | CVE-2001-1061 | Unspecified vulnerability in IBM AIX Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error. | 10.0 |
2001-08-14 | CVE-2001-0554 | Classic Buffer Overflow vulnerability in multiple products Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function. | 10.0 |
2000-12-31 | CVE-2000-1239 | Information Disclosure vulnerability in IBM Tivoli Management Framework 3.7.1 The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log files. | 9.0 |