Unix

🟠 High   ⏱ 30–90 min  Last verified: 9 March 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2001-1557, IBM Support Bulletin CVE: CVE-2001-1557 NVD summary: Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges. References: www-1.ibm.com/support/search.wss?rs=0&q=IY20486&   www-1.ibm.com/support/search.wss?rs=0&q=IY23674&   www-1.ibm.com/support/search.wss?rs=0&q=IY20486& Table of contents […]

🟡 Medium   ⏱ 15–45 min  Last verified: 8 March 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2023-23475, IBM Support Bulletin CVE: CVE-2023-23475 NVD summary: IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus […]

🟠 High   ⏱ 30–90 min  Last verified: 8 March 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-1999-0131, IBM PSIRT advisory page CVE: CVE-1999-0131 NVD summary: Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users. References: www.securityfocus.com/bid/717   […]

🟡 Medium   ⏱ 15–45 min  Last verified: 7 March 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2020-4412, IBM Support Bulletin CVE: CVE-2020-4412 NVD summary: The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service security vulnerability. An attacker […]

🟠 High   ⏱ 30–90 min  Last verified: 4 March 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-1999-0093, IBM PSIRT advisory page CVE: CVE-1999-0093 NVD summary: AIX nslookup command allows local users to obtain root access by not dropping privileges correctly. References: exchange.xforce.ibmcloud.com/vulnerabilities/CVE   exchange.xforce.ibmcloud.com/vulnerabilities/CVE Table of contents Symptom […]

🟢 Low   ⏱ 10–30 min  Last verified: 2 March 2023 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2023-23472, IBM Support Bulletin CVE: CVE-2023-23472 NVD summary: IBM InfoSphere DataStage Flow Designer (InfoSphere Information Server 11.7) could allow an authenticated user to obtain sensitive information that could aid in further attacks […]

🟡 Medium   ⏱ 15–45 min  Last verified: 2 March 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2021-20550, IBM Support Bulletin CVE: CVE-2021-20550 NVD summary: IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering […]

🟠 High   ⏱ 30–90 min  Last verified: 2 March 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2023-40363, IBM Support Bulletin CVE: CVE-2023-40363 NVD summary: IBM InfoSphere Information Server 11.7 could allow an authenticated user to change installation files due to incorrect file permission settings. IBM X-Force ID: 263332. […]

🟡 Medium   ⏱ 15–45 min  Last verified: 1 March 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2020-4299, IBM Support Bulletin CVE: CVE-2020-4299 NVD summary: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 could expose sensitive information to a user through a specially crafted HTTP request. IBM X-Force […]

🟠 High   ⏱ 30–90 min  Last verified: 1 March 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2000-1222, IBM PSIRT advisory page CVE: CVE-2000-1222 NVD summary: AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by […]