Vulnerabilities > IBM > Medium

DATE CVE VULNERABILITY TITLE RISK
2002-10-28 CVE-2002-1203 Resource Management Errors vulnerability in IBM Secureway Firewall 4.2/4.2.1
IBM SecureWay Firewall before 4.2.2 performs extra processing before determining that a packet is invalid and dropping it, which allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed TCP packets without any flags set.
network
low complexity
ibm CWE-399
5.0
2002-10-28 CVE-2002-1201 Remote Empty TCP Flag Flood Denial Of Service vulnerability in IBM AIX 4.3.3/5
IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a flood of malformed TCP packets without any flags set, which prevents AIX from releasing the associated memory buffers.
network
low complexity
ibm
5.0
2002-10-11 CVE-2002-1153 Buffer Overflow vulnerability in IBM Websphere Application Server 4.0.3
IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as "Host".
network
low complexity
ibm
5.0
2002-10-04 CVE-2002-1041 Remote Security vulnerability in IBM AIX DCE
Unknown vulnerability in DCE (1) SMIT panels and (2) configuration commands, possibly related to relative pathnames.
network
low complexity
ibm
5.0
2002-10-04 CVE-2002-1040 Remote Security vulnerability in IBM AIX Websecure
Unknown vulnerability in the WebSecure (DFSWeb) configuration utilities in AIX 4.x, possibly related to relative pathnames.
network
low complexity
ibm
5.0
2002-07-31 CVE-2002-1450 Denial-Of-Service vulnerability in IBM Universe
IBM UniVerse with UV/ODBC allows attackers to cause a denial of service (client crash or server CPU consumption) via a query with an invalid link between tables, possibly via a buffer overflow.
network
low complexity
ibm
5.0
2002-04-01 CVE-2002-1620 Remote Security vulnerability in IBM AIX Parallel Systems Support Programs 3.1.1/3.2/3.4
Unknown vulnerability in IBM AIX Parallel Systems Support Programs (PSSP) 3.1.1, 3.2, and 3.4 allows remote attackers to read arbitrary files from a file collection.
network
low complexity
ibm
5.0
2002-03-08 CVE-2002-1619 Denial-Of-Service vulnerability in AIX
Buffer overflow in the FC client for IBM AIX 4.3.x allows remote attackers to cause a denial of service (crash and core dump).
network
low complexity
ibm
5.0
2001-12-31 CVE-2001-1567 Remote Authentication Bypass vulnerability in IBM Lotus Domino and Lotus Domino Server
Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by Domino.
network
low complexity
ibm
5.0
2001-12-31 CVE-2001-1554 Denial-Of-Service vulnerability in IBM AIX 430
IBM AIX 430 does not properly unlock IPPMTU_LOCK, which allows remote attackers to cause a denial of service (hang) via Path Maximum Transmit Unit (PMTU) IP packets.
network
low complexity
ibm
5.0