Approved changes feed: RSS · Atom

cpe:2.3:o:ibm:aix:5.3.8:*:*:*:*:*:*:*

part: o version: 5.3.8 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductAix (2e221359-367b-5334-8247-15de081008f2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3699 vulnerable 2026-06-08 04:51:43.666100 Details available
Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd.
Published: 2009-10-15T10:00:00.000Z
Updated: 2024-08-07T06:38:30.398Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3517 vulnerable 2026-06-08 04:51:42.361277 Details available
nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfs_portmon setting, which allows remote attackers to bypass intended access restrictions for NFSv4 shares via unspecified vectors.
Published: 2009-10-01T15:00:00.000Z
Updated: 2024-08-07T06:31:10.341Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3516 vulnerable 2026-06-08 04:51:42.358583 Details available
gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors.
Published: 2009-10-01T15:00:00.000Z
Updated: 2024-08-07T06:31:10.414Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2727 vulnerable 2026-06-08 04:51:30.237984 Details available
Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary code via a long XDR-encoded ASCII string to remote procedure 15.
Published: 2009-08-10T23:00:00.000Z
Updated: 2024-09-16T17:03:42.405Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0536 vulnerable 2026-06-08 04:51:09.874323 Details available
at in bos.rte.cron on IBM AIX 5.2.0, 5.3.0 through 5.3.9, and 6.1.0 through 6.1.2 allows local users to read arbitrary files via unspecified vectors, related to failure to drop root privileges.
Published: 2009-02-11T20:00:00.000Z
Updated: 2024-08-07T04:40:03.745Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0370 vulnerable 2026-06-08 04:51:09.176284 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.