🟢 Low ⏱ 10–30 min Last verified: 23 July 2016 Affected versions: IBM AIX 7.2 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2014-3566, IBM Support Bulletin CVE: CVE-2014-3566 NVD summary: The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for […]
🟠 High ⏱ 30–90 min Last verified: 23 July 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-1999-0691, IBM PSIRT advisory page CVE: CVE-1999-0691 NVD summary: Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name. […]
🟠 High ⏱ 30–90 min Last verified: 23 July 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2005-4272, IBM Support Bulletin CVE: CVE-2005-4272 NVD summary: Multiple buffer overflows in IBM AIX 5.1, 5.2, and 5.3 allow remote attackers to execute arbitrary code via (1) muxatmd and (2) slocal. References: […]
🟢 Low ⏱ 10–30 min Last verified: 18 July 2016 Affected versions: IBM AIX 7.2 Affected: 7.1, 7.2 📖 ~4 min read • Source: NVD CVE-2016-0266, IBM Support Bulletin CVE: CVE-2016-0266 NVD summary: IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it […]
🟡 Medium ⏱ 15–45 min Last verified: 18 July 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2006-0667, IBM Support Bulletin CVE: CVE-2006-0667 NVD summary: lscfg in IBM AIX 5.2 and 5.3 allows local users to modify arbitrary files via a symlink attack. References: securitytracker.com/id?1015622 www-1.ibm.com/support/docview.wss?uid=isg1IY7762 www-1.ibm.com/support/docview.wss?uid=isg1IY7763 […]
🟢 Low ⏱ 5–15 min Last verified: 17 July 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4500-1 Related CVEs: CVE-2014-9862 Upstream summary: It was discovered that bsdiff mishandled certain input. If a user were tricked into opening a malicious file, an attacker could cause bsdiff to […]
🟠 High ⏱ 30–90 min Last verified: 16 July 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2001-1557, IBM Support Bulletin CVE: CVE-2001-1557 NVD summary: Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges. References: www-1.ibm.com/support/search.wss?rs=0&q=IY20486& www-1.ibm.com/support/search.wss?rs=0&q=IY23674& www-1.ibm.com/support/search.wss?rs=0&q=IY20486& Table of contents […]
🟠 High ⏱ 30–90 min Last verified: 16 July 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2007-1043, IBM PSIRT advisory page CVE: CVE-2007-1043 NVD summary: Ezboo webstats, possibly 3.0.3, allows remote attackers to bypass authentication and gain access via a direct request to (1) update.php and (2) config.php. […]
🟡 Medium ⏱ 10–30 min Last verified: 15 July 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:0115-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-10173 Upstream summary: Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files […]
🟠 High ⏱ 30–90 min Last verified: 14 July 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2003-0064, IBM PSIRT advisory page CVE: CVE-2003-0064 NVD summary: The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to […]
