Ibm

Aix

545 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2009-4361

  • EPSS 0.35%
  • Veröffentlicht 21.12.2009 16:30:00
  • Zuletzt bearbeitet 16.06.2026 23:13:31

Multiple buffer overflows in qoslist in IBM AIX 6.1 allow local users to cause a denial of service (application crash) or possibly gain privileges via a long string argument. NOTE: some of these details are obtained from third party information.

7.2

CVE-2009-4362

  • EPSS 0.35%
  • Veröffentlicht 21.12.2009 16:30:00
  • Zuletzt bearbeitet 16.06.2026 23:13:31

Multiple buffer overflows in qosmod in IBM AIX 6.1 allow local users to cause a denial of service (application crash) or possibly gain privileges via long string arguments. NOTE: some of these details are obtained from third party information.

10

CVE-2009-3699

Exploit
  • EPSS 62.09%
  • Veröffentlicht 15.10.2009 10:30:01
  • Zuletzt bearbeitet 16.06.2026 23:12:10

Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to ...

7.2

CVE-2009-3516

  • EPSS 0.38%
  • Veröffentlicht 01.10.2009 15:30:00
  • Zuletzt bearbeitet 16.06.2026 23:11:45

gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors.

10

CVE-2009-3517

  • EPSS 4.36%
  • Veröffentlicht 01.10.2009 15:30:00
  • Zuletzt bearbeitet 16.06.2026 23:11:45

nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfs_portmon setting, which allows remote attackers to bypass intended access restrictions for NFSv4 shares via unspecified vectors.

9.3

CVE-2009-2727

Exploit
  • EPSS 26.75%
  • Veröffentlicht 10.08.2009 23:30:00
  • Zuletzt bearbeitet 16.06.2026 23:10:07

Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote at...

7.2

CVE-2009-2669

  • EPSS 0.72%
  • Veröffentlicht 05.08.2009 19:30:01
  • Zuletzt bearbeitet 16.06.2026 23:09:57

A certain debugging component in IBM AIX 5.3 and 6.1 does not properly handle the (1) _LIB_INIT_DBG and (2) _LIB_INIT_DBG_FILE environment variables, which allows local users to gain privileges by leveraging a setuid-root program to create an arbitra...

7.2

CVE-2009-2434

  • EPSS 0.37%
  • Veröffentlicht 13.07.2009 14:30:00
  • Zuletzt bearbeitet 16.06.2026 23:09:26

Buffer overflow in the syscall implementation in IBM AIX 5.3 allows local users to gain privileges via unspecified vectors.

7.8

CVE-2009-1954

  • EPSS 1.31%
  • Veröffentlicht 08.06.2009 01:00:00
  • Zuletzt bearbeitet 16.06.2026 23:08:25

Unspecified vulnerability in portmapper (aka portmap) in IBM AIX 5.3 allows attackers to cause a denial of service (daemon hang) via unknown vectors, related to libtli.

6.9

CVE-2009-1786

  • EPSS 0.67%
  • Veröffentlicht 26.05.2009 15:30:05
  • Zuletzt bearbeitet 16.06.2026 23:08:03

The malloc subsystem in libc in IBM AIX 5.3 and 6.1 allows local users to create or overwrite arbitrary files via a symlink attack on the log file associated with the MALLOCDEBUG environment variable.