Show filters
84 Total Results
Displaying 21-30 of 84
Sort by:
Attacker Value
Unknown
CVE-2012-4845
Disclosure Date: October 20, 2012 (last updated October 05, 2023)
The FTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly manage privileges in an RBAC environment, which allows attackers to bypass intended file-read restrictions by leveraging the setuid installation of the ftp executable file.
0
Attacker Value
Unknown
CVE-2012-4833
Disclosure Date: October 01, 2012 (last updated October 05, 2023)
fuser in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly restrict the -k option, which allows local users to kill arbitrary processes via a crafted command line.
0
Attacker Value
Unknown
CVE-2012-4817
Disclosure Date: September 14, 2012 (last updated October 05, 2023)
The NFSv4 client implementation in IBM AIX 5.3, 6.1, and 7.1, and VIOS before 2.2.1.4-FP-25 SP-02, does not properly handle GID values, which allows remote attackers to cause a denial of service via unspecified vectors.
0
Attacker Value
Unknown
CVE-2012-0723
Disclosure Date: July 30, 2012 (last updated October 04, 2023)
The kernel in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly implement the dupmsg system call, which allows local users to cause a denial of service (system crash) via a crafted application.
0
Attacker Value
Unknown
CVE-2012-2200
Disclosure Date: June 27, 2012 (last updated October 04, 2023)
The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain privileges by entering a command in a .forward file in a home directory.
0
Attacker Value
Unknown
CVE-2012-2179
Disclosure Date: June 22, 2012 (last updated October 04, 2023)
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
0
Attacker Value
Unknown
CVE-2012-2192
Disclosure Date: June 20, 2012 (last updated October 04, 2023)
The socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local users to cause a denial of service (system crash) via a crafted application that leverages the presence of a socket on the free list.
0
Attacker Value
Unknown
CVE-2012-0745
Disclosure Date: May 04, 2012 (last updated October 04, 2023)
The getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not properly interact with customer-extended LDAP user filtering, which allows local users to gain privileges via unspecified vectors.
0
Attacker Value
Unknown
CVE-2011-1385
Disclosure Date: March 02, 2012 (last updated October 04, 2023)
IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.1.x and 2.2.x, allows remote attackers to cause a denial of service (system crash) via an ICMP Echo Reply packet that contains 1 in the Identifier field, a different vulnerability than CVE-2012-0194.
0
Attacker Value
Unknown
CVE-2012-0194
Disclosure Date: February 06, 2012 (last updated October 04, 2023)
The TCP implementation in IBM AIX 5.3, 6.1, and 7.1, when the Large Send Offload option is enabled, allows remote attackers to cause a denial of service (assertion failure and panic) via an unspecified series of packets.
0
