| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| The rexd service is running, which uses weak authentication that can allow an attacker to execute commands. |
| FTP installation script anon.ftp in AIX insecurely configures anonymous FTP, which allows remote attackers to execute arbitrary commands. |
| The default configuration for UUCP in AIX before 3.2 allows local users to gain root privileges. |
| IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privileges by changing the GroupMapping registry key. |
| Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file. |
| Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death. |
| AIX infod allows local users to gain root access through an X display. |
| AIX passwd allows local users to gain root access. |
| Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood. |
| AIX bugfiler program allows local users to gain root access. |
| Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names. |
| Buffer overflow in syslog utility allows local or remote attackers to gain root privileges. |
| Various vulnerabilities in the AIX portmir command allows local users to obtain root access. |
| Buffer overflow in AIX writesrv command allows local users to obtain root access. |
| Buffer overflow in AIX rcp command allows local users to obtain root access. |
| Buffer overflow in AIX libDtSvc library can allow local users to gain root access. |
| IRIX and AIX automountd services (autofsd) allow remote users to execute root commands. |
| Denial of service in AIX telnet can freeze a system and prevent users from accessing the server. |
| AIX routed allows remote users to modify sensitive files. |
| Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname. |
