| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program. |
| Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages. |
| Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems. |
| AIX Licensed Program Product performance tools allow local users to gain root access. |
| Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure. |
| CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure. |
| Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote attackers to gain root privileges via login, and local users to gain privileges via login, su, or passwd, with a username that contains format string specifiers. |
| Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer. |
| The rexd service is running, which uses weak authentication that can allow an attacker to execute commands. |
| AIX techlibss allows local users to overwrite files via a symlink attack. |
| create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service. |
| inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attackers to cause a denial of service via a large number of connections to port N-1, which are not properly closed by inetd. |
| AIX passwd allows local users to gain root access. |
| Buffer overflow in AIX lquerylv program gives root access to local users. |
| Buffer overflow in statd allows root privileges. |
| The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands. |
| AIX piodmgrsu command allows local users to gain additional group privileges. |
| Buffer overflow in AIX rcp command allows local users to obtain root access. |
| Buffer overflow in University of Washington's implementation of IMAP and POP servers. |
| The secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with the loadmodule, which allows remote attackers to directly connect to the daemon and conduct unauthorized activities. |
