🟡 Medium ⏱ 10–30 min Last verified: 26 March 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-1946 Upstream summary: gnomesu-pam-backend in libgnomesu 1.0.0 prints an error message but proceeds with the non-error code path upon failure of the setgid or setuid […]
🟡 Medium ⏱ 10–30 min Last verified: 24 March 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-6318 Upstream summary: Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service (application crash) […]
🟡 Medium ⏱ 15–45 min Last verified: 22 March 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-1999-0116, IBM PSIRT advisory page CVE: CVE-1999-0116 NVD summary: Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, […]
🟡 Medium ⏱ 15–45 min Last verified: 22 March 2016 Affected versions: IBM AIX 7.2 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2015-4948, IBM Support Bulletin CVE: CVE-2015-4948 NVD summary: netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to […]
🟡 Medium ⏱ 10–30 min Last verified: 22 March 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2013:1364-1 (see also SUSE bugzilla) Related CVEs: CVE-2007-6746 Upstream summary: telepathy-idle before 0.1.15 does not verify (1) that the issuer is a trusted CA, (2) that the server hostname matches a domain […]
🟡 Medium ⏱ 10–30 min Last verified: 21 March 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2015:1892-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-5198 CVE-2015-5199 CVE-2015-5200 Upstream summary: libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain privileges via unspecified vectors, […]
🟠 High ⏱ 30–90 min Last verified: 21 March 2016 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2016-9795, IBM PSIRT advisory page CVE: CVE-2016-9795 NVD summary: The casrvc program in CA Common Services, as used in CA Client Automation 12.8, 12.9, and 14.0; CA SystemEDGE 5.8.2 and 5.9; CA […]
🟡 Medium ⏱ 15–45 min Last verified: 19 March 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-1999-0024, IBM PSIRT advisory page CVE: CVE-1999-0024 NVD summary: DNS cache poisoning via BIND, by predictable query IDs. References: exchange.xforce.ibmcloud.com/vulnerabilities/CVE exchange.xforce.ibmcloud.com/vulnerabilities/CVE Table of contents Symptom & Impact Environment & Reproduction Root […]
🟠 High ⏱ 30–90 min Last verified: 18 March 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2000-1222, IBM PSIRT advisory page CVE: CVE-2000-1222 NVD summary: AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by […]
🟠 High ⏱ 30–90 min Last verified: 18 March 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2007-4355, IBM Support Bulletin CVE: CVE-2007-4355 NVD summary: Buffer overflow in the at program on IBM AIX 5.3 allows local users to gain privileges via unspecified vectors. References: ftp://aix.software.ibm.com/aix/efixes/security/R osvdb.org/36794 […]
