ibm aix 5 vulnerabilities and exploits

(subscribe to this query)

IBM AIX 4.3.3 and AIX 5 allows remote malicious users to cause a denial of service (CPU consumption or crash) via a flood of malformed TCP packets without any flags set, which prevents AIX from releasing the associated memory buffers.

Ibm Aix 5 Ibm Aix 4.3.3

Untrusted execution path vulnerability in the diag commands (1) lsmcode, (2) diag_exec, (3) invscout, and (4) invscoutd in AIX 5.1 up to and including 5.3 allows local users to execute arbitrary programs by modifying the DIAGNOSTICS environment variable to point to a malicious Dc...

Ibm Aix 5.2 L Ibm Aix 5.3 Ibm Aix 5.2 Ibm Aix 5.2.2 Ibm Aix 5.1 Ibm Aix 5.1l Ibm Aix 5.3 L

1 EDB exploit

Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands.

Ibm Aix 4.3.3 Ibm Aix 5.1 Ibm Aix 5.2

2 EDB exploits

Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.

Ibm Aix 3.2 Ibm Aix 4.1 Ibm Aix 4.2

1 EDB exploit

Buffer overflow in multiple "p" commands in IBM AIX 5.1, 5.2 and 5.3 might allow local users to execute arbitrary code via long command line arguments to (1) penable or other hard-linked files including (2) pdisable, (3) pstart, (4) phold, (5) pdelay, or (6) pshare.

Ibm Aix 5.1 Ibm Aix 5.3 Ibm Aix 5.1l Ibm Aix 5.2 Ibm Aix 5.2.2 Ibm Aix 5.2 L Ibm Aix 5.3 L

The nddstat programs on IBM AIX 5.2, 5.3, and 6.1 do not properly handle environment variables, which allows local users to gain privileges by invoking (1) atmstat, (2) entstat, (3) fddistat, (4) hdlcstat, or (5) tokstat.

Ibm Aix 5.2 Ibm Aix 5.3 Ibm Aix 6.1

Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands", possibly including (1) rdist, (2) rsh, (3) rcp, (4) rsync, and (5) rlogin.

Ibm Aix 5.3 Ibm Aix 5.2

Denial of service in BIND named via naptr.

Sco Unixware 7 Sun Sunos 5.7 Sco Openserver 5 Ibm Aix 4.3 Sco Unixware 2

Denial of service in BIND named via malformed SIG records.

Sco Openserver 5 Sco Unixware 7 Sun Sunos 5.7 Ibm Aix 4.3 Sco Unixware 2

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook