🟢 Low ⏱ 10–30 min Last verified: 26 July 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2014-4805, IBM Support Bulletin CVE: CVE-2014-4805 NVD summary: IBM DB2 10.5 before FP4 on Linux and AIX creates temporary files during CDE table LOAD operations, which allows local users to obtain sensitive […]
🟢 Low ⏱ 5–15 min Last verified: 25 July 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3063-1 Related CVEs: CVE-2016-5384 Upstream summary: Tobias Stoeckmann discovered that Fontconfig incorrectly handled cache files. A local attacker could possibly use this issue with a specially crafted cache file to […]
🟡 Medium ⏱ 15–45 min Last verified: 24 July 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2016-8981, IBM Support Bulletin CVE: CVE-2016-8981 NVD summary: IBM BigFix Inventory v9 allows web pages to be stored locally which can be read by another user on the system. References: www.ibm.com/support/docview.wss?uid=swg21994932 […]
🟡 Medium ⏱ 15–45 min Last verified: 24 July 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2007-4238, IBM Support Bulletin CVE: CVE-2007-4238 NVD summary: AIX 5.2 and 5.3 install pioinit with user and group ownership of bin, which allows local users with bin or possibly printq privileges to […]
🟢 Low ⏱ 10–30 min Last verified: 23 July 2016 Affected versions: IBM AIX 7.2 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2014-3566, IBM Support Bulletin CVE: CVE-2014-3566 NVD summary: The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for […]
🟠 High ⏱ 30–90 min Last verified: 23 July 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-1999-0691, IBM PSIRT advisory page CVE: CVE-1999-0691 NVD summary: Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name. […]
🟠 High ⏱ 30–90 min Last verified: 23 July 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2005-4272, IBM Support Bulletin CVE: CVE-2005-4272 NVD summary: Multiple buffer overflows in IBM AIX 5.1, 5.2, and 5.3 allow remote attackers to execute arbitrary code via (1) muxatmd and (2) slocal. References: […]
🟢 Low ⏱ 10–30 min Last verified: 18 July 2016 Affected versions: IBM AIX 7.2 Affected: 7.1, 7.2 📖 ~4 min read • Source: NVD CVE-2016-0266, IBM Support Bulletin CVE: CVE-2016-0266 NVD summary: IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it […]
🟡 Medium ⏱ 15–45 min Last verified: 18 July 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2006-0667, IBM Support Bulletin CVE: CVE-2006-0667 NVD summary: lscfg in IBM AIX 5.2 and 5.3 allows local users to modify arbitrary files via a symlink attack. References: securitytracker.com/id?1015622 www-1.ibm.com/support/docview.wss?uid=isg1IY7762 www-1.ibm.com/support/docview.wss?uid=isg1IY7763 […]
🟢 Low ⏱ 5–15 min Last verified: 17 July 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4500-1 Related CVEs: CVE-2014-9862 Upstream summary: It was discovered that bsdiff mishandled certain input. If a user were tricked into opening a malicious file, an attacker could cause bsdiff to […]
