IBM
Page 85 of 87 — IBM CVEs from a corpus of 8644, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2003-1282 | | 2003-12-31 | IBM Net.Data allows remote attackers to obtain sensitive information such as path names, server names and possibly user names and passwords by causing the (1)… | |
CVE-2003-1104 | | 2003-12-31 | Buffer overflow in IBM Tivoli Firewall Toolbox (TFST) 1.2 allows remote attackers to execute arbitrary code via unknown vectors. | |
CVE-2003-0954 | | 2003-12-31 | Buffer overflow in rcp for AIX 4.3.3, 5.1 and 5.2 allows local users to gain privileges. | |
CVE-2003-0914 | | 2003-12-15 | ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses wi… | |
CVE-2003-0898 | | 2003-11-17 | IBM DB2 7.2 before FixPak 10a, and earlier versions including 7.1, allows local users to overwrite arbitrary files and gain privileges via a symlink attack on… | |
CVE-2003-0837 | | 2003-11-17 | Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 for Windows, before Fixpak 10a, allows attackers with "Connect" privileges to execute arbitrary… | |
CVE-2003-0836 | | 2003-11-17 | Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 before Fixpak 10 and 10a, and 8.1 before Fixpak 2, allows attackers with "Connect" privileges to… | |
CVE-2003-0827 | | 2003-10-06 | The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial of service (crash) via a long packet to UDP port 523. | |
CVE-2003-0784 | | 2003-10-06 | Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote attackers to gain root privileges via login, and local users to ga… | |
CVE-2003-0759 | | 2003-10-06 | Buffer overflow in db2licm in IBM DB2 Universal Data Base 7.2 before Fixpak 10a allows local users to gain root privileges via a long command line argument. | |
CVE-2003-0758 | | 2003-10-06 | Buffer overflow in db2dart in IBM DB2 Universal Data Base 7.2 before Fixpak 10 allows local users to gain root privileges via a long command line argument. | |
CVE-2003-0697 | | 2003-10-06 | Format string vulnerability in lpd in the bos.rte.printers fileset for AIX 4.3 through 5.2, with debug enabled, allows local users to cause a denial of service… | |
CVE-2003-0694 | | 2003-10-06 | The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr func… | |
CVE-2003-0681 | | 2003-10-06 | A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific enve… | |
CVE-2003-0580 | | 2003-08-18 | Buffer overflow in uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier allows the uvadm user to execute arbitrary code via a long -uv.install command line argument. | |
CVE-2003-0579 | | 2003-08-18 | uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier trusts the user-supplied -uv.install command line option to find and execute the uv.install program, which allo… | |
CVE-2003-0578 | High | 7.8 | 2003-08-18 | cci_dir in IBM U2 UniVerse 10.0.0.9 and earlier creates hard links and unlinks files as root, which allows local users to gain privileges by deleting and overw… |
CVE-2003-0285 | | 2003-06-16 | IBM AIX 5.2 and earlier distributes Sendmail with a configuration file (sendmail.cf) with the (1) promiscuous_relay, (2) accept_unresolvable_domains, and (3) a… | |
CVE-2002-1468 | | 2003-04-22 | Buffer overflow in errpt in AIX 4.3.3 allows local users to execute arbitrary code as root. | |
CVE-2003-0181 | | 2003-04-02 | Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrat… | |
CVE-2003-0180 | | 2003-04-02 | Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the… | |
CVE-2003-0179 | | 2003-04-02 | Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vect… | |
CVE-2003-0178 | | 2003-04-02 | Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via (1) the s_V… | |
CVE-2002-1551 | | 2003-03-31 | Buffer overflow in nslookup in IBM AIX may allow attackers to cause a denial of service or execute arbitrary code. | |
CVE-2002-1550 | | 2003-03-31 | dump_smutil.sh in IBM AIX allows local users to overwrite arbitrary files via a symlink attack on temporary files. | |
CVE-2002-1548 | | 2003-03-31 | Unknown vulnerability in autofs on AIX 4.3.0, when using executable maps, allows attackers to execute arbitrary commands as root, possibly related to "string h… | |
CVE-2003-0028 | | 2003-03-25 | Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, includin… | |
CVE-2003-0123 | | 2003-03-18 | Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to cause a denial of service (crash) via a l… | |
CVE-2003-0122 | | 2003-03-18 | Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via a long distinguishe… | |
CVE-2003-0064 | | 2003-03-03 | The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in… | |
CVE-2002-2372 | | 2002-12-31 | The telnet server in Infoprint 21 running controller software before 1.056007 allows remote attackers to cause a denial of service (crash) via a long username… | |
CVE-2002-2025 | | 2002-12-31 | Lotus Domino server 5.0.9a and earlier allows remote attackers to cause a denial of service by exhausting the number of working threads via a large number of H… | |
CVE-2002-2014 | | 2002-12-31 | Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provided in HTTP requests, which allows remote attackers to dete… | |
CVE-2002-1822 | | 2002-12-31 | IBM HTTP Server 1.0 on AS/400 allows remote attackers to obtain the path to the web root directory and other sensitive information, which is leaked in an error… | |
CVE-2002-1731 | | 2002-12-31 | The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF. | |
CVE-2002-1690 | | 2002-12-31 | Unknown vulnerability in AIX before 4.0 with unknown attack vectors and unknown impact, aka "security issue," as fixed by APAR IY28225. | |
CVE-2002-1689 | | 2002-12-31 | Unknown vulnerability in the login program on AIX before 4.0 could allow remote users to specify 100 or more environment variables when logging on, which excee… | |
CVE-2002-1687 | | 2002-12-31 | Buffer overflow in the diagnostics library in AIX allows local users to "cause data and instructions to be overwritten" via a long DIAGNOSTICS environment vari… | |
CVE-2002-1686 | | 2002-12-31 | Buffer overflow in lscfg of unknown versions of AIX has unknown impact. | |
CVE-2002-1624 | | 2002-12-31 | Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause a denial of service (crash) and possibl… | |
CVE-2002-1622 | | 2002-12-31 | Buffer overflow in certain RPC routines in IBM AIX 4.3 may allow attackers to execute arbitrary code, related to a "variable data type." | |
CVE-2002-1169 | | 2002-11-04 | IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of service (crash) via an HTTP request to he… | |
CVE-2002-1168 | | 2002-11-04 | Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script… | |
CVE-2002-1167 | | 2002-11-04 | Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script… | |
CVE-2002-1203 | | 2002-10-28 | IBM SecureWay Firewall before 4.2.2 performs extra processing before determining that a packet is invalid and dropping it, which allows remote attackers to cau… | |
CVE-2002-1201 | | 2002-10-28 | IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a flood of malformed TCP packets without any flags… | |
CVE-2002-1153 | | 2002-10-11 | IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with long HTTP headers… | |
CVE-2002-0370 | | 2002-10-10 | Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files contai… | |
CVE-2002-1041 | | 2002-10-04 | Unknown vulnerability in DCE (1) SMIT panels and (2) configuration commands, possibly related to relative pathnames. | |
CVE-2002-1040 | | 2002-10-04 | Unknown vulnerability in the WebSecure (DFSWeb) configuration utilities in AIX 4.x, possibly related to relative pathnames. | |
CVE-2002-1012 | | 2002-10-04 | Buffer overflow in web server for Tivoli Management Framework (TMF) ManagedNode 3.6.x through 3.7.1 allows remote attackers to cause a denial of service or exe… | |
CVE-2002-1011 | | 2002-10-04 | Buffer overflow in web server for Tivoli Management Framework (TMF) Endpoint 3.6.x through 3.7.1, before Fixpack 2, allows remote attackers to cause a denial o… | |
CVE-2002-0905 | | 2002-10-04 | Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable. | |
CVE-2002-0679 | | 2002-09-05 | Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an arg… | |
CVE-2002-0790 | | 2002-08-12 | clchkspuser and clpasswdremote in AIX expose an encrypted password in the cspoc.log file, which could allow local users to gain privileges. | |
CVE-2002-0747 | | 2002-08-12 | Buffer overflow in lsmcode in AIX 4.3.3. | |
CVE-2002-0746 | | 2002-08-12 | Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument. | |
CVE-2002-0745 | | 2002-08-12 | Buffer overflow in uucp in AIX 4.3.3. | |
CVE-2002-0744 | | 2002-08-12 | namerslv in AIX 4.3.3 core dumps when called with a very long argument, possibly as a result of a buffer overflow. | |
CVE-2002-0743 | | 2002-08-12 | mail and mailx in AIX 4.3.3 core dump when called with a very long argument, an indication of a buffer overflow. | |
CVE-2002-0742 | | 2002-08-12 | Buffer overflow in pioout on AIX 4.3.3. | |
CVE-2002-1450 | | 2002-07-31 | IBM UniVerse with UV/ODBC allows attackers to cause a denial of service (client crash or server CPU consumption) via a query with an invalid link between table… | |
CVE-2002-0678 | | 2002-07-23 | CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRAN… | |
CVE-2002-0677 | | 2002-07-23 | CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file… | |
CVE-2002-0555 | | 2002-07-03 | IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQL code in a web for… | |
CVE-2002-0554 | | 2002-07-03 | webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary files via a SQL injection attack in an HTTP… | |
CVE-2002-0541 | | 2002-07-03 | Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and (2) the TSM Client Acceptor Service 4.2 and 5.1, allows remote… | |
CVE-2002-1621 | | 2002-04-22 | Buffer overflow in the file_comp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code. | |
CVE-2002-0037 | | 2002-04-22 | Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NS… | |
CVE-2002-1620 | | 2002-04-01 | Unknown vulnerability in IBM AIX Parallel Systems Support Programs (PSSP) 3.1.1, 3.2, and 3.4 allows remote attackers to read arbitrary files from a file colle… | |
CVE-2002-0086 | | 2002-03-15 | Buffer overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux allows local users to gain root privileges via a long (1) Notes_ExecDirectory or (2) PATH… | |
CVE-2002-1619 | | 2002-03-08 | Buffer overflow in the FC client for IBM AIX 4.3.x allows remote attackers to cause a denial of service (crash and core dump). | |
CVE-2001-1079 | | 2002-02-13 | create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to d… | |
CVE-2001-1567 | | 2001-12-31 | Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes templ… | |
CVE-2001-1557 | | 2001-12-31 | Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges. | |
CVE-2001-1554 | | 2001-12-31 | IBM AIX 430 does not properly unlock IPPMTU_LOCK, which allows remote attackers to cause a denial of service (hang) via Path Maximum Transmit Unit (PMTU) IP pa… | |
CVE-2001-1529 | | 2001-12-31 | Buffer overflow in rpc.yppasswdd (yppasswd server) in AIX allows attackers to gain unauthorized access via a long string. NOTE: due to lack of details in the… | |
CVE-2001-1504 | | 2001-12-31 | Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed… | |
CVE-2001-1440 | | 2001-12-21 | Unknown vulnerability in login for AIX 5.1L, when using loadable authentication modules, allows remote attackers to gain access to the system. | |
CVE-2001-1189 | | 2001-12-13 | IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the password… | |
CVE-2001-0797 | | 2001-12-12 | Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments thro… | |
CVE-2001-1191 | | 2001-12-11 | WebSeal in IBM Tivoli SecureWay Policy Director 3.8 allows remote attackers to cause a denial of service (crash) via a URL that ends in %2e. | |
CVE-2001-0856 | | 2001-12-06 | Common Cryptographic Architecture (CCA) in IBM 4758 allows an attacker with physical access to the system and Combine_Key_Parts permissions, to steal DES and 3… | |
CVE-2001-0824 | | 2001-12-06 | Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a reque… | |
CVE-2001-0671 | | 2001-12-06 | Buffer overflows in (1) send_status, (2) kill_print, and (3) chk_fhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges. | |
CVE-2001-0924 | | 2001-11-22 | Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote attackers to read arbitrary files via a .. (dot dot) in the LO par… | |
CVE-2001-1096 | | 2001-10-09 | Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code. | |
CVE-2001-1095 | | 2001-10-09 | Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter. | |
CVE-2001-0998 | | 2001-09-24 | IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports (e.g., using a port scan) that does not send a… | |
CVE-2001-0552 | | 2001-09-20 | ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metachar… | |
CVE-2001-0962 | | 2001-09-19 | IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere user… | |
CVE-2000-1215 | | 2001-09-19 | The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP headers of replies… | |
CVE-2001-1061 | | 2001-08-31 | Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error. | |
CVE-2000-1202 | | 2001-08-31 | ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which al… | |
CVE-2001-0554 | | 2001-08-14 | Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options incl… | |
CVE-2001-0533 | | 2001-08-14 | Buffer overflow in libi18n library in IBM AIX 5.1 and 4.3.x allows local users to gain root privileges via a long LANG environmental variable. | |
CVE-2001-0573 | | 2001-08-02 | lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2) lslv in a certain directory that is u… | |
CVE-2001-0982 | | 2001-07-23 | Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via e… | |
CVE-2000-0891 | | 2001-07-21 | A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email message that is aut… | |
CVE-2001-1265 | | 2001-07-20 | Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbitrary files via a… |