Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2004-1621 1Ibm 1Lotus Domino Apr 16, 2026 Oct 18, 2004 N/A· v4 N/A· v3 4.3 MEDIUM· v2 NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbitrary web script or H...Show more NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of (1) computed for display, (2) computed when composed, or (3) computed text element fields. NOTE: the vendor has disputed this issue, saying that it is not a problem with Notes/Domino itself, but with the applications that do not properly handle this featureShow less
CVE-2003-1052 1Ibm 2Db2 Db2 Universal Database Apr 16, 2026 Sep 28, 2004 N/A· v4 N/A· v3 7.2 HIGH· v2 IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs.
CVE-2003-1051 1Ibm 1Db2 Apr 16, 2026 Sep 28, 2004 N/A· v4 N/A· v3 7.2 HIGH· v2 Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.
CVE-2003-1049 1Ibm 1Db2 Universal Database Apr 16, 2026 Sep 28, 2004 N/A· v4 N/A· v3 4.6 MEDIUM· v2 IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions (777), which allows local users to modify or delete certain DB2 files.
CVE-2002-1583 1Ibm 1Db2 Universal Database Apr 16, 2026 Sep 28, 2004 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file descriptor argument.
CVE-2004-1663 5Broadcom BrocadeEngenio+2 more 6D280 Ds4100Fabric Operating System+3 more Apr 16, 2026 Sep 4, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Engenio/LSI Logic storage controllers, as used in products such as Storagetek D280, and IBM DS4100 (formerly FastT 100) and Brocade SilkWorm Switches, allow remote attackers to cause a denial of service (freeze and possi...Show more Engenio/LSI Logic storage controllers, as used in products such as Storagetek D280, and IBM DS4100 (formerly FastT 100) and Brocade SilkWorm Switches, allow remote attackers to cause a denial of service (freeze and possible data corruption) via crafted TCP packets.Show less
CVE-2004-1372 1Ibm 1Db2 Universal Database Apr 16, 2026 Sep 1, 2004 N/A· v4 N/A· v3 7.2 HIGH· v2 Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile proc...Show more Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.Show less
CVE-2004-0684 1Ibm 2Websphere Caching Proxy Server Websphere Edge Server Caching Proxy Apr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 WebSphere Edge Component Caching Proxy in WebSphere Edge Server 5.02, with the JunctionRewrite directive enabled, allows remote attackers to cause a denial of service via an HTTP GET request without any parameters.
CVE-2004-0669 1Ibm 1Lotus Domino Apr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 Lotus Domino 6.5.0 and 6.5.1, with IMAP enabled, allows remote authenticated users to change their quota by using the IMAP setquota command.
CVE-2004-0586 1Ibm 1Acprunner Apr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 10.0 HIGH· v2 acpRunner ActiveX 1.2.5.0 allows remote attackers to execute arbitrary code via the (1) DownLoadURL, (2) SaveFilePath, and (3) Download ActiveX methods.
CVE-2004-0545 1Ibm 1Aix Apr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 7.2 HIGH· v2 LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack.
CVE-2004-0544 1Ibm 1Aix Apr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 7.2 HIGH· v2 Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands.
CVE-2004-0493 5Apache AvayaGentoo+2 more 8Converged Communications Server Http ServerHttp Server+5 more Apr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 6.4 MEDIUM· v2 The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 6...Show more The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.Show less
CVE-2004-0492 5Apache HpIbm+2 more 7Http Server Http ServerOpenbsd+4 more Apr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 10.0 HIGH· v2 Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length H...Show more Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.Show less
CVE-2004-0368 3Ibm Open GroupXi Graphics 3Aix Cde Common Desktop EnvironmentDextop Apr 16, 2026 May 4, 2004 N/A· v4 N/A· v3 10.0 HIGH· v2 Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet.
CVE-2003-0257 1Ibm 1Aix Apr 16, 2026 Apr 15, 2004 N/A· v4 N/A· v3 7.2 HIGH· v2 Format string vulnerability in the printer capability for IBM AIX .3, 5.1, and 5.2 allows local users to gain printq or root privileges.
CVE-2003-1018 1Ibm 1Aix Apr 16, 2026 Mar 29, 2004 N/A· v4 N/A· v3 7.2 HIGH· v2 Format string vulnerability in enq command in AIX 4.3, 5.1, and 5.2 allows local users with rintq group privileges to gain privileges via unknown attack vectors.
CVE-2003-0170 1Ibm 1Aix Apr 16, 2026 Mar 29, 2004 N/A· v4 N/A· v3 10.0 HIGH· v2 Unknown vulnerability in ftpd in IBM AIX 5.2, when configured to use Kerberos 5 for authentication, allows remote attackers to gain privileges via unknown attack vectors.
CVE-2004-1082 8Apache AppleAvaya+5 more 14Apache Mod Digest Apple Communication ManagerHttp Server+11 more Apr 16, 2026 Feb 3, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
CVE-2003-0119 1Ibm 1Aix Apr 16, 2026 Feb 3, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 The secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with the loadmodule, which allows remote attackers to directly connect to the daemon and conduct unauthorized activities.

Previous 1...399400401...413 Next