🟢 Low ⏱ 10–30 min Last verified: 13 October 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2003-1437, IBM PSIRT advisory page CVE: CVE-2003-1437 NVD summary: BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keystore is used to store a private key […]
🟠 High ⏱ 30–90 min Last verified: 12 October 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-1999-0835, IBM PSIRT advisory page CVE: CVE-1999-0835 NVD summary: Denial of service in BIND named via malformed SIG records. References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSS www.securityfocus.com/bid/788 ftp://ftp.caldera.com/pub/security/OpenLinux/CSS Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 30–90 min Last verified: 12 October 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2000-0844, IBM PSIRT advisory page CVE: CVE-2000-0844 NVD summary: Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary […]
🟡 Medium ⏱ 10–30 min Last verified: 12 October 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2016:3107-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-7970 CVE-2016-7971 CVE-2016-7969 CVE-2016-7972 Upstream summary: Buffer overflow in the calc_coeff function in libass/ass_blur.c in libass before 0.13.4 allows remote attackers to cause a denial […]
🟢 Low ⏱ 5–15 min Last verified: 9 October 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3026-1 Related CVEs: CVE-2016-5104 Upstream summary: It was discovered that libimobiledevice incorrectly handled socket permissions. A remote attacker could use this issue to access services on iOS devices, contrary to […]
🟠 High ⏱ 30–90 min Last verified: 9 October 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2010-0960, IBM Support Bulletin CVE: CVE-2010-0960 NVD summary: Buffer overflow in qosmod in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors. References: aix.software.ibm.com/aix/efixes/security/qosmod_ […]
🟡 Medium ⏱ 15–45 min Last verified: 8 October 2016 Affected versions: IBM AIX 7.2 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2012-4845, IBM Support Bulletin CVE: CVE-2012-4845 NVD summary: The FTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly manage privileges in an RBAC environment, […]
🟠 High ⏱ 30–90 min Last verified: 6 October 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2008-1601, IBM Support Bulletin CVE: CVE-2008-1601 NVD summary: Stack-based buffer overflow in the reboot program on IBM AIX 5.2 and 5.3 allows local users in the shutdown group to gain privileges. References: […]
🟡 Medium ⏱ 15–45 min Last verified: 5 October 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2002-1040, IBM PSIRT advisory page CVE: CVE-2002-1040 NVD summary: Unknown vulnerability in the WebSecure (DFSWeb) configuration utilities in AIX 4.x, possibly related to relative pathnames. References: archives.neohapsis.com/archives/aix/2002-q3/0000 archives.neohapsis.com/archives/aix/2002-q3/0000 Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 4 October 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3217-1 Related CVEs: https://launchpad.net/bugs/1668321 Upstream summary: Frederic Bardy and Quentin Biguenet discovered that network-manager-applet incorrectly checked permissions when connecting to certain wireless networks. A local attacker could use this issue […]
