IT, Cloud & DevOps Blog

🟠 High   ⏱ 30–90 min  Last verified: 2 January 2012 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-1999-0687, IBM PSIRT advisory page CVE: CVE-1999-0687 NVD summary: The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands. References: sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=col   www.ciac.org/ciac/bulletins/k-001.shtml   www.securityfocus.com/bid/637 Table […]

🟡 Medium   ⏱ 15–45 min  Last verified: 1 January 2012 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-1999-0094, IBM PSIRT advisory page CVE: CVE-1999-0094 NVD summary: AIX piodmgrsu command allows local users to gain additional group privileges. References: exchange.xforce.ibmcloud.com/vulnerabilities/CVE   exchange.xforce.ibmcloud.com/vulnerabilities/CVE Table of contents Symptom & Impact Environment & […]

🟡 Medium   ⏱ 15–45 min  Last verified: 29 December 2011 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2008-1594, IBM Support Bulletin CVE: CVE-2008-1594 NVD summary: The kernel in IBM AIX 5.2 and 5.3 does not properly handle resizing JFS2 filesystems on concurrent volume groups spread across multiple nodes, which […]

🟠 High   ⏱ 30–90 min  Last verified: 28 December 2011 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2010-1039, IBM Support Bulletin CVE: CVE-2010-1039 NVD summary: Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 […]

🟠 High   ⏱ 30–90 min  Last verified: 24 December 2011 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2004-1028, IBM Support Bulletin CVE: CVE-2004-1028 NVD summary: Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modifying the PATH […]

🟡 Medium   ⏱ 15–45 min  Last verified: 23 December 2011 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2008-5387, IBM Support Bulletin CVE: CVE-2008-5387 NVD summary: Buffer overflow in autoconf6 in IBM AIX 6.1.0 through 6.1.2, when Role-Based Access Control is enabled, allows local users with aix.network.config.tcpip authorization to gain […]

🟠 High   ⏱ 30–90 min  Last verified: 22 December 2011 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2009-2434, IBM Support Bulletin CVE: CVE-2009-2434 NVD summary: Buffer overflow in the syscall implementation in IBM AIX 5.3 allows local users to gain privileges via unspecified vectors. References: secunia.com/advisories/35754   securitytracker.com/id?1022530   […]

🟠 High   ⏱ 30–90 min  Last verified: 20 December 2011 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2002-1468, IBM PSIRT advisory page CVE: CVE-2002-1468 NVD summary: Buffer overflow in errpt in AIX 4.3.3 allows local users to execute arbitrary code as root. References: archives.neohapsis.com/archives/aix/2002-q3/0007   www.securityfocus.com/bid/5885   archives.neohapsis.com/archives/aix/2002-q3/0007 Table […]

🟠 High   ⏱ 30–90 min  Last verified: 18 December 2011 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-1999-1405, IBM PSIRT advisory page CVE: CVE-1999-1405 NVD summary: snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap […]

🟠 High   ⏱ 30–90 min  Last verified: 18 December 2011 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2000-1121, IBM Support Bulletin CVE: CVE-2000-1121 NVD summary: Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long -M argument. […]