Vulnerabilities > IBM > Vios > High

DATE CVE VULNERABILITY TITLE RISK
2012-06-27 CVE-2012-2200 Permissions, Privileges, and Access Controls vulnerability in IBM AIX and Vios
The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain privileges by entering a command in a .forward file in a home directory.
local
low complexity
ibm CWE-264
7.2
2012-05-04 CVE-2012-0745 Permissions, Privileges, and Access Controls vulnerability in IBM AIX and Vios
The getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not properly interact with customer-extended LDAP user filtering, which allows local users to gain privileges via unspecified vectors.
local
low complexity
ibm CWE-264
7.2
2012-03-02 CVE-2011-1385 Resource Management Errors vulnerability in IBM AIX and Vios
IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.1.x and 2.2.x, allows remote attackers to cause a denial of service (system crash) via an ICMP Echo Reply packet that contains 1 in the Identifier field, a different vulnerability than CVE-2012-0194.
network
low complexity
ibm CWE-399
7.8
2010-03-10 CVE-2010-0961 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in IBM AIX and Vios
Buffer overflow in qoslist in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors.
local
low complexity
ibm CWE-119
7.2
2010-03-10 CVE-2010-0960 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in IBM AIX and Vios
Buffer overflow in qosmod in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors.
local
low complexity
ibm CWE-119
7.2