IBM Aix vulnerabilities, page 3
531 vulnerabilities
Known vulnerabilities in IBM Aix, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2007-1798ibmaix
EPSS score0.45%
Buffer overflow in the drmgr command in IBM AIX 5.2 and 5.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long path name.CVE-2007-0392ibmaixEPSS score0.36%
IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.CVE-2007-0618ibmaixEPSS score2.06%
Unspecified vulnerability in (1) pop3d, (2) pop3ds, (3) imapd, and (4) imapds in IBM AIX 5.3.0 has unspecified impact and attack vectors, involving an "authentication vulnerability."CVE-2007-0978ibmaixEPSS score0.39%
Buffer overflow in swcons in IBM AIX 5.3 allows local users to gain privileges via long input data.CVE-2007-0670ibmaixEPSS score0.49%
Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands", possibly including (1) rdist, (2) rsh, (3) rcp, (4) rsync, and (5) rlogin.CVE-2007-4791ibmaixEPSS score0.39%
Buffer overflow in the swcons command in bos.rte.console in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2005-3504 and CVE-2007-0978.CVE-2007-4795ibmaixEPSS score0.37%
Buffer overflow in mkpath in bos.rte.methods in IBM AIX 5.2 and 5.3 allows local users to gain privileges via a long ODM name.CVE-2007-4621ibmaixEPSS score0.37%
Buffer overflow in crontab in IBM AIX 5.2 allows local users to gain privileges via long command line arguments.CVE-2007-4238ibmaixEPSS score0.31%
AIX 5.2 and 5.3 install pioinit with user and group ownership of bin, which allows local users with bin or possibly printq privileges to gain root privileges by modifying pioinit.CVE-2007-4796ibmaixEPSS score0.37%
Buffer overflow in uucp in bos.net.uucp in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors.CVE-2007-4236ibmaixEPSS score0.36%
Buffer overflow in lpd in bos.rte.printers in AIX 5.2 and 5.3 allows local users with printq group privileges to gain root privileges.CVE-2007-4355ibmaixEPSS score0.37%
Buffer overflow in the at program on IBM AIX 5.3 allows local users to gain privileges via unspecified vectors.CVE-2007-4623ibmaixEPSS score0.51%
Stack-based buffer overflow in the sendrmt function in bellmail in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via a long parameter to the m command.CVE-2007-4353ibmaixEPSS score0.34%
Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain root privileges via unspecified vectors involving the (1) chpath, (2) rmpath, and (3) devinstall programs in bos.rte.methods.CVE-2007-4237ibmaixEPSS score0.34%
Buffer overflow in the atm subset in arp in devices.common.IBM.atm.rte in AIX 5.2 and 5.3 allows local users to gain root privileges.CVE-2007-4004ibmaixEPSS score0.85%
Buffer overflow in the ftp client in IBM AIX 5.3 SP6 and 5.2.0 allows local users to execute arbitrary code via unspecified vectors that trigger the overflow in a gets function call. NOTE: the client is setuid root on AIX, so this issue crosses privilege boundaries.CVE-2007-4003ibmaixEPSS score1.75%
pioout in IBM AIX 5.3 SP6 allows local users to execute arbitrary code by specifying a malicious library with the -R (ParseRoutine) command line argument.CVE-2007-4797ibmaixEPSS score0.37%
Multiple buffer overflows in unspecified svprint (System V print) commands in bos.svprint.rte in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors.CVE-2007-4622ibmaixEPSS score0.33%
Integer underflow in the dns_name_fromtext function in (1) libdns_nonsecure.a and (2) libdns_secure.a in IBM AIX 5.2 allows local users to gain privileges via a crafted "-y" (TSIG key) command line argument to dig.CVE-2007-4513ibmaixEPSS score1.27%
Multiple stack-based buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges via a long argument to the (1) "-p" option to lqueryvg or (2) the "-V" option to lquerypv.