Vulnerabilities > IBM > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2008-03-31 | CVE-2008-1597 | Denial-Of-Service vulnerability in IBM AIX 6.1 The WPAR system call implementation in the kernel in IBM AIX 6.1 allows local users to cause a denial of service via unknown calls that trigger "undefined behavior." | 4.9 |
| 2008-03-31 | CVE-2008-1595 | Permissions, Privileges, and Access Controls vulnerability in IBM AIX 5.2/5.3/6.1 The proc filesystem in the kernel in IBM AIX 5.2 and 5.3 does not properly enforce directory permissions when a file executing from a directory has weaker permissions than the directory itself, which allows local users to obtain sensitive information. | 4.9 |
| 2008-03-31 | CVE-2008-1594 | Denial-Of-Service vulnerability in IBM AIX 5.2/5.3/6.1 The kernel in IBM AIX 5.2 and 5.3 does not properly handle resizing JFS2 filesystems on concurrent volume groups spread across multiple nodes, which allows local users of one node to cause a denial of service (remote node crash) by using chfs or lreducelv to reduce a filesystem's size. | 4.9 |
| 2008-03-31 | CVE-2008-1592 | Permissions, Privileges, and Access Controls vulnerability in IBM Websphere MQ 5.1/5.3/5.3.1 MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms does not require mqm group membership for execution of administrative tasks, which allows local users to bypass intended access restrictions via the runmqsc program, related to "Pathway panels." | 4.6 |
| 2008-03-20 | CVE-2007-4592 | Cross-Site Scripting vulnerability in IBM Rational Clearquest Multiple cross-site scripting (XSS) vulnerabilities in the web interface for IBM Rational ClearQuest before 2003.06.16 Patch 2008A, 7.0.0.2_iFix01, and 7.0.1.1_iFix01 allow remote attackers to inject arbitrary web script or HTML via the (1) contextid, (2) username, (3) userNameVal, and (4) schema parameters to the login component. | 4.3 |
| 2008-03-11 | CVE-2008-1288 | Information Exposure vulnerability in IBM Rational Clearquest 7.0.0.2/7.0.1.1 IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 might allow local or remote attackers to obtain sensitive information about users by reading user cookies. | 5.0 |
| 2008-03-11 | CVE-2008-1287 | Configuration vulnerability in IBM Rational Clearquest 7.0.0.2/7.0.1.1 IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames. | 5.0 |
| 2008-03-10 | CVE-2008-1274 | Local Privilege Escalation vulnerability in IBM AIX 6.1.0 Untrusted search path vulnerability in man in IBM AIX 6.1.0 allows local users to execute arbitrary code via a malicious program in the man directory. local ibm | 6.9 |
| 2008-03-09 | CVE-2008-1216 | Improper Input Validation vulnerability in IBM Lotus Quickr Server 8.0 IBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, does not properly identify URIs containing cross-site scripting (XSS) attack strings, which allows remote attackers to inject arbitrary web script or HTML via a Calendar OpenDocument action to main.nsf with a Count parameter containing a JavaScript event in a malformed element, as demonstrated by an onload event in an IFRAME element. | 6.8 |
| 2008-03-04 | CVE-2008-1130 | Improper Authentication vulnerability in IBM Websphere MQ 5.3/6 Unspecified vulnerability in IBM WebSphere MQ 6.0.x before 6.0.2.2 and 5.3 before Fix Pack 14 allows attackers to bypass access restrictions for a queue manager via a SVRCONN (MQ client) channel. | 6.6 |