IBM AIX 7.3

🟠 High   ⏱ 30–90 min  Last verified: 6 July 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-1999-0687, IBM PSIRT advisory page CVE: CVE-1999-0687 NVD summary: The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands. References: sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=col   www.ciac.org/ciac/bulletins/k-001.shtml   www.securityfocus.com/bid/637 Table […]

🟡 Medium   ⏱ 15–45 min  Last verified: 6 July 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2022-38712, IBM Support Bulletin CVE: CVE-2022-38712 NVD summary: "IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Web services could allow a man-in-the-middle attacker to conduct SOAPAction spoofing to execute unwanted or […]

🟠 High   ⏱ 30–90 min  Last verified: 6 July 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2005-0250, IBM Support Bulletin CVE: CVE-2005-0250 NVD summary: Format string vulnerability in auditselect on IBM AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via format string specifiers in […]

🟡 Medium   ⏱ 15–45 min  Last verified: 5 July 2022 Affected versions: IBM AIX 7.3 Affected: 7.1 📖 ~4 min read  •  Source: NVD CVE-2015-4948, IBM Support Bulletin CVE: CVE-2015-4948 NVD summary: netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to […]

🟡 Medium   ⏱ 15–45 min  Last verified: 5 July 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2008-1595, IBM Support Bulletin CVE: CVE-2008-1595 NVD summary: The proc filesystem in the kernel in IBM AIX 5.2 and 5.3 does not properly enforce directory permissions when a file executing from a […]

🟡 Medium   ⏱ 15–45 min  Last verified: 3 July 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2007-4799, IBM Support Bulletin CVE: CVE-2007-4799 NVD summary: The perfstat kernel extension in bos.perf.perfstat in AIX 5.3 does not verify privileges when processing a SET call, which allows local users to cause […]