IBM
Page 86 of 87 — IBM CVEs from a corpus of 8644, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2001-1313 | | 2001-07-16 | Lotus Domino R5 before R5.0.7a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via miscellaneous packets with… | |
CVE-2001-1312 | | 2001-07-16 | Format string vulnerabilities in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code… | |
CVE-2001-1311 | | 2001-07-16 | Buffer overflows in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstr… | |
CVE-2001-1310 | | 2001-07-16 | IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for the L field of a… | |
CVE-2001-1309 | | 2001-07-16 | Buffer overflows in IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the… | |
CVE-2001-1143 | | 2001-07-11 | IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6790, or (2) db2jds.exe on port 6789. | |
CVE-2001-1441 | | 2001-07-02 | Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute JavaScript on other clients via the URL, whi… | |
CVE-2001-0390 | | 2001-07-02 | IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long string of %0a charact… | |
CVE-2001-0389 | | 2001-07-02 | IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a NOEXISTINGHTML… | |
CVE-2001-0487 | | 2001-06-27 | AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection. | |
CVE-2001-0472 | | 2001-06-27 | Hursley Software Laboratories Consumer Transaction Framework (HSLCTF) HTTP object allows remote attackers to cause a denial of service (crash) via an extremely… | |
CVE-2001-1080 | | 2001-06-19 | diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allows local users to gain privileges by mod… | |
CVE-2001-0446 | | 2001-06-18 | IBM WCS (WebSphere Commerce Suite) 4.0.1 with Application Server 3.0.2 allows remote attackers to read source code for .jsp files by appending a / to the reque… | |
CVE-2001-1330 | | 2001-06-11 | Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument. | |
CVE-2001-1329 | | 2001-06-11 | Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument. | |
CVE-2001-0312 | | 2001-06-02 | IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTTP request that contains a host header t… | |
CVE-2001-0319 | | 2001-05-03 | orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the order_rn option of the report c… | |
CVE-2001-0122 | | 2001-03-13 | Kernel leak in AfpaCache module of the Fast Response Cache Accelerator (FRCA) component of IBM HTTP Server 1.3.x and Websphere 3.52 allows remote attackers to… | |
CVE-1999-0729 | | 2001-03-12 | Buffer overflow in Lotus Notes LDAP (NLDAP) allows an attacker to conduct a denial of service through the ldap_search request. | |
CVE-1999-0718 | | 2001-03-12 | IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privileges by changing the GroupMapping regist… | |
CVE-2001-0052 | | 2001-02-16 | IBM DB2 Universal Database version 6.1 allows users to cause a denial of service via a malformed query. | |
CVE-2001-0051 | | 2001-02-16 | IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote attackers to gain access to the database. | |
CVE-2000-1168 | | 2001-01-09 | IBM HTTP Server 1.3.6 (based on Apache) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request. | |
CVE-2000-1138 | | 2001-01-09 | Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, which could allow an attacker to modify t… | |
CVE-2000-1124 | | 2001-01-09 | Buffer overflow in piobe command in IBM AIX 4.3.x allows local users to gain privileges via long environmental variables. | |
CVE-2000-1123 | | 2001-01-09 | Buffer overflow in pioout command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands. | |
CVE-2000-1122 | | 2001-01-09 | Buffer overflow in setclock command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long argument. | |
CVE-2000-1121 | | 2001-01-09 | Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long -M argument. | |
CVE-2000-1120 | | 2001-01-09 | Buffer overflow in digest command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands. | |
CVE-2000-1119 | | 2001-01-09 | Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a long "x=" argument. | |
CVE-2000-1117 | | 2001-01-09 | The Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client R5 allows malicious web site operators to determine the existen… | |
CVE-2000-1110 | | 2001-01-09 | document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by sending a nonexistent c… | |
CVE-2000-1239 | | 2000-12-31 | The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allow… | |
CVE-2000-1038 | | 2000-12-11 | The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an empty GET request. | |
CVE-2000-1222 | | 2000-12-10 | AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by modifying the path to… | |
CVE-2000-0873 | | 2000-11-14 | netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and possibly hide evid… | |
CVE-2000-0848 | | 2000-11-14 | Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host: request header. | |
CVE-2000-0844 | | 2000-11-14 | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbit… | |
CVE-2000-0761 | | 2000-10-20 | OS2/Warp 4.5 FTP server allows remote attackers to cause a denial of service via a long username. | |
CVE-2000-0677 | | 2000-10-20 | Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PATH_INFO environmental variable. | |
CVE-2000-0652 | | 2000-07-24 | IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains th… | |
CVE-2000-0466 | | 2000-06-20 | AIX cdmount allows local users to gain root privileges via shell metacharacters. | |
CVE-2000-0497 | High | 7.5 | 2000-06-08 | IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case. |
CVE-2000-0505 | | 2000-05-31 | The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / charac… | |
CVE-2000-0441 | | 2000-05-24 | Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems. | |
CVE-2000-0249 | | 2000-04-26 | The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program. | |
CVE-1999-0693 | | 2000-03-02 | Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges. | |
CVE-2000-1216 | | 2000-01-27 | Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine. | |
CVE-2000-0080 | | 2000-01-10 | AIX techlibss allows local users to overwrite files via a symlink attack. | |
CVE-1999-1589 | | 1999-12-31 | Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors. | |
CVE-1999-1488 | | 1999-12-31 | sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication. | |
CVE-1999-1117 | | 1999-12-31 | lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter. | |
CVE-2000-0027 | | 1999-12-27 | IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack. | |
CVE-1999-0852 | | 1999-12-02 | IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin. | |
CVE-1999-0851 | | 1999-11-10 | Denial of service in BIND named via naptr. | |
CVE-1999-0835 | | 1999-11-10 | Denial of service in BIND named via malformed SIG records. | |
CVE-1999-1531 | | 1999-11-02 | Buffer overflow in IBM HomePagePrint 1.0.7 for Windows98J allows a malicious Web site to execute arbitrary code on a viewer's system via a long IMG_SRC HTML ta… | |
CVE-1999-0903 | | 1999-10-26 | genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767. | |
CVE-1999-1583 | | 1999-09-30 | Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument. | |
CVE-1999-0789 | | 1999-09-28 | Buffer overflow in AIX ftpd in the libc library. | |
CVE-1999-1013 | | 1999-09-23 | named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and a malformed zone fi… | |
CVE-1999-0691 | | 1999-09-13 | Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name. | |
CVE-1999-0687 | | 1999-09-13 | The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands. | |
CVE-1999-0745 | | 1999-08-18 | Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler. | |
CVE-1999-0694 | | 1999-08-11 | Denial of service in AIX ptrace system call allows local users to crash the system. | |
CVE-1999-1414 | | 1999-05-25 | IBM Netfinity Remote Control allows local users to gain administrator privileges by starting programs from the process manager, which runs with system level pr… | |
CVE-1999-0803 | | 1999-05-25 | The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack. | |
CVE-1999-1079 | | 1999-05-06 | Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program. | |
CVE-1999-0429 | | 1999-03-01 | The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference. | |
CVE-1999-1405 | | 1999-02-17 | snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is… | |
CVE-1999-1546 | | 1999-01-29 | netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable. | |
CVE-1999-0057 | | 1998-11-16 | Vacation program allows command execution by remote users through a sendmail command. | |
CVE-1999-0118 | | 1998-11-01 | AIX infod allows local users to gain root access through an X display. | |
CVE-1999-0088 | | 1998-10-26 | IRIX and AIX automountd services (autofsd) allow remote users to execute root commands. | |
CVE-1999-1404 | | 1998-10-02 | IBM/Tivoli OPC Tracker Agent version 2 release 1 allows remote attackers to cause a denial of service (resource exhaustion) via malformed data to the localtrac… | |
CVE-1999-1403 | | 1998-10-02 | IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions (world-readable and world-writabl… | |
CVE-1999-1574 | | 1998-07-06 | Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execute arbitrary code via "long input string… | |
CVE-1999-1480 | | 1998-06-11 | (1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack. | |
CVE-1999-0055 | | 1998-05-14 | Buffer overflows in Sun libnsl allow root access. | |
CVE-1999-0011 | Medium | 5.4 | 1998-04-08 | Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer. |
CVE-1999-0010 | | 1998-04-08 | Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages. | |
CVE-1999-0009 | | 1998-04-08 | Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases. | |
CVE-1999-0003 | | 1998-04-01 | Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd). | |
CVE-1999-1075 | | 1998-03-18 | inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 without passing control… | |
CVE-1999-1486 | | 1998-02-25 | sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink att… | |
CVE-1999-0087 | | 1998-02-01 | Denial of service in AIX telnet can freeze a system and prevent users from accessing the server. | |
CVE-1999-1487 | | 1998-01-21 | Vulnerability in digest in AIX 4.3 allows printq users to gain root privileges by creating and/or modifing any file on the system. | |
CVE-1999-0014 | | 1998-01-21 | Unauthorized privileged access or denial of service via dtappgather program in CDE. | |
CVE-1999-0086 | | 1998-01-08 | AIX routed allows remote users to modify sensitive files. | |
CVE-1999-0513 | | 1998-01-05 | ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service. | |
CVE-1999-0284 | | 1998-01-01 | Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command. | |
CVE-1999-0017 | | 1997-12-10 | FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce. | |
CVE-1999-0018 | | 1997-12-05 | Buffer overflow in statd allows root privileges. | |
CVE-1999-0097 | | 1997-10-29 | The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character). | |
CVE-1999-0094 | | 1997-10-29 | AIX piodmgrsu command allows local users to gain additional group privileges. | |
CVE-1999-0093 | | 1997-10-29 | AIX nslookup command allows local users to obtain root access by not dropping privileges correctly. | |
CVE-1999-0092 | | 1997-10-29 | Various vulnerabilities in the AIX portmir command allows local users to obtain root access. | |
CVE-1999-0091 | | 1997-10-28 | Buffer overflow in AIX writesrv command allows local users to obtain root access. | |
CVE-1999-0089 | | 1997-10-28 | Buffer overflow in AIX libDtSvc library can allow local users to gain root access. | |
CVE-1999-0072 | | 1997-10-22 | Buffer overflow in AIX xdat gives root access to local users. |