ibm aix 4 vulnerabilities and exploits

(subscribe to this query)

4.6

CVSSv2

lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2) lslv in a certain directory that is under the user's control, which cause lsfs to access the programs in that directory.

Ibm Aix 4

4.6

CVSSv2

Buffer overflow in setsenv command in IBM AIX 4.3.x and previous versions allows local users to execute arbitrary commands via a long "x=" argument.

Ibm Aix 4.3.2 Ibm Aix 4.3.3 Ibm Aix 4.2 Ibm Aix 4.2.1 Ibm Aix 4.3 Ibm Aix 4.3.1

1 EDB exploit

7.2

CVSSv2

Buffer overflow in enq command in IBM AIX 4.3.x and previous versions may allow local users to execute arbitrary commands via a long -M argument.

Ibm Aix 4.2 Ibm Aix 4.2.1 Ibm Aix 4.3 Ibm Aix 4.3.1 Ibm Aix 4.3.2 Ibm Aix 4.3.3

1 EDB exploit

5

CVSSv2

Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems.

Ibm Aix 4.1.3 Ibm Aix 4.1.5 Ibm Aix 4.3.2 Ibm Aix 3.2.4 Ibm Aix 3.2.5 Ibm Aix 4.1 Ibm Aix 4.1.1 Ibm Aix 4.2 Ibm Aix 4.2.1 Ibm Aix 4.3 Ibm Aix 4.3.1 Ibm Aix 3.2 Ibm Aix 4.1.2 Ibm Aix 4.1.4

10

CVSSv2

Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.

Ibm Aix 3.2 Ibm Aix 4.1 Ibm Aix 4.2

1 EDB exploit

7.2

CVSSv2

Untrusted execution path vulnerability in the diag commands (1) lsmcode, (2) diag_exec, (3) invscout, and (4) invscoutd in AIX 5.1 up to and including 5.3 allows local users to execute arbitrary programs by modifying the DIAGNOSTICS environment variable to point to a malicious Dc...

Ibm Aix 5.2 L Ibm Aix 5.3 Ibm Aix 5.2 Ibm Aix 5.2.2 Ibm Aix 5.1 Ibm Aix 5.1l Ibm Aix 5.3 L

1 EDB exploit

7.2

CVSSv2

Buffer overflow in multiple "p" commands in IBM AIX 5.1, 5.2 and 5.3 might allow local users to execute arbitrary code via long command line arguments to (1) penable or other hard-linked files including (2) pdisable, (3) pstart, (4) phold, (5) pdelay, or (6) pshare.

Ibm Aix 5.1 Ibm Aix 5.3 Ibm Aix 5.1l Ibm Aix 5.2 Ibm Aix 5.2.2 Ibm Aix 5.2 L Ibm Aix 5.3 L

2.1

CVSSv2

netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and possibly hide evidence of unusual network activities.

Ibm Aix 4.2 Ibm Aix 4.3.1 Ibm Aix 4.3.2 Ibm Aix 4.2.1 Ibm Aix 4.3

1 EDB exploit

7.2

CVSSv2

The nddstat programs on IBM AIX 5.2, 5.3, and 6.1 do not properly handle environment variables, which allows local users to gain privileges by invoking (1) atmstat, (2) entstat, (3) fddistat, (4) hdlcstat, or (5) tokstat.

Ibm Aix 5.2 Ibm Aix 5.3 Ibm Aix 6.1

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook