🟠 High ⏱ 30–90 min Last verified: 1 January 2017 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-1999-0093, IBM PSIRT advisory page CVE: CVE-1999-0093 NVD summary: AIX nslookup command allows local users to obtain root access by not dropping privileges correctly. References: exchange.xforce.ibmcloud.com/vulnerabilities/CVE exchange.xforce.ibmcloud.com/vulnerabilities/CVE Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 1 January 2017 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2013:1926-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-4566 CVE-2015-5244 CVE-2016-3099 Upstream summary: mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting […]
🟡 Medium ⏱ 15–45 min Last verified: 31 December 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2008-5385, IBM Support Bulletin CVE: CVE-2008-5385 NVD summary: enq in bos.rte.printers in IBM AIX 6.1.0 through 6.1.2, when a print queue is defined in /etc/qconfig, allows local users to delete arbitrary files […]
🟠 High ⏱ 30–90 min Last verified: 30 December 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2002-0744, IBM PSIRT advisory page CVE: CVE-2002-0744 NVD summary: namerslv in AIX 4.3.3 core dumps when called with a very long argument, possibly as a result of a buffer overflow. References: archives.neohapsis.com/archives/aix/2002-q2/0005 […]
🟠 High ⏱ 30–90 min Last verified: 28 December 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2016-5985, IBM Support Bulletin CVE: CVE-2016-5985 NVD summary: The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker […]
🟡 Medium ⏱ 15–45 min Last verified: 26 December 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2004-2697, IBM PSIRT advisory page CVE: CVE-2004-2697 NVD summary: The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack […]
🟢 Low ⏱ 5–15 min Last verified: 26 December 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3623-1 Related CVEs: https://launchpad.net/bugs/1174007 Upstream summary: It was discovered that ubuntu-release-upgrader did not correctly drop permissions before opening a browser to view the release notes. This update fixes the issue. […]
🟠 High ⏱ 30–90 min Last verified: 26 December 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2007-5764, IBM Support Bulletin CVE: CVE-2007-5764 NVD summary: Buffer overflow in the pioout program in printers.rte in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via a long […]
🟠 High ⏱ 30–90 min Last verified: 24 December 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2004-0544, IBM Support Bulletin CVE: CVE-2004-0544 NVD summary: Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands. […]
🟠 High ⏱ 30–90 min Last verified: 23 December 2016 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2016-3053, IBM Support Bulletin CVE: CVE-2016-3053 NVD summary: IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. References: aix.software.ibm.com/aix/efixes/security/lsmcode www.securityfocus.com/bid/93605 www.securitytracker.com/id/1037030 […]
