Ibm
ibm
9,039 CVEs • 1,615 products
Products (1,615)
Click to collapseToggle
Products (1,615)
Click to collapse
CVEs (9,039)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands. |
5Apache AvayaGentoo+2 more8Converged Communications Server Http ServerHttp Server+5 moreApr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 6.4 MEDIUM· v2 The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 6...Show more |
5Apache HpIbm+2 more7Http Server Http ServerOpenbsd+4 moreApr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 10.0 HIGH· v2 Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length H...Show more |
3Ibm Open GroupXi Graphics3Aix Cde Common Desktop EnvironmentDextopApr 16, 2026 May 4, 2004 N/A· v4 N/A· v3 10.0 HIGH· v2 Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet. |
Format string vulnerability in the printer capability for IBM AIX .3, 5.1, and 5.2 allows local users to gain printq or root privileges. |
Format string vulnerability in enq command in AIX 4.3, 5.1, and 5.2 allows local users with rintq group privileges to gain privileges via unknown attack vectors. |
Unknown vulnerability in ftpd in IBM AIX 5.2, when configured to use Kerberos 5 for authentication, allows remote attackers to gain privileges via unknown attack vectors. |
8Apache AppleAvaya+5 more14Apache Mod Digest Apple Communication ManagerHttp Server+11 moreApr 16, 2026 Feb 3, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials. |
The secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with the loadmodule, which allows remote attackers to directly connect to the daemon and conduct unauthorized activities. |
1Ibm 2Informix Dynamic Server Informix Extended Parallel ServerApr 16, 2026 Jan 27, 2004 N/A· v4 N/A· v3 7.2 HIGH· v2 Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable. |
2Cisco Ibm17Call Manager Conference ConnectionDirector Agent+14 moreApr 16, 2026 Jan 21, 2004 N/A· v4 N/A· v3 10.0 HIGH· v2 The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by...Show more |
2Cisco Ibm17Call Manager Conference ConnectionDirector Agent+14 moreApr 16, 2026 Jan 21, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 14247, as demonstrated...Show more |
Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable permissions, which allows local users to modify the Notes configuration and gain privileges. |
The getipnodebyname() API in AIX 5.1 and 5.2 does not properly close sockets, which allows attackers to cause a denial of service (resource exhaustion). |
2Ibm Iss2Blackice Server Protection Internet Security Systems Blackice DefenderApr 16, 2026 Dec 31, 2003 N/A· v4 N/A· v3 4.3 MEDIUM· v2 BlackICE Defender 2.9.cap and Server Protection 3.5.cdf, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets. |
IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm (XOR and base64 encoding), which allows local users to decrypt passwords when the configuration file is exported to XML. |
Buffer overflow in IBM Tivoli Firewall Toolbox (TFST) 1.2 allows remote attackers to execute arbitrary code via unknown vectors. |
Buffer overflow in rcp for AIX 4.3.3, 5.1 and 5.2 allows local users to gain privileges. |
9Compaq FreebsdHp+6 more10Aix BindFreebsd+7 moreApr 16, 2026 Dec 15, 2003 N/A· v4 N/A· v3 4.3 MEDIUM· v2 ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value. |
IBM DB2 7.2 before FixPak 10a, and earlier versions including 7.1, allows local users to overwrite arbitrary files and gain privileges via a symlink attack on (1) db2job and (2) db2job2. |