Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:vios:2.2.1.4:fp-25_sp-02:*:*:*:*:*:*

part: a version: 2.2.1.4 update: fp-25_sp-02

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductVios (60217296-7514-53fe-8112-0ee153a5adfe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3977 vulnerable 2026-06-08 05:05:43.749575 Details available
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on a temporary file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2179.
Published: 2014-06-08T23:00:00.000Z
Updated: 2024-08-06T10:57:18.063Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3074 vulnerable 2026-06-08 05:05:31.005311 Details available
The runtime linker in IBM AIX 6.1 and 7.1 and VIOS 2.2.x allows local users to create a mode-666 root-owned file, and consequently gain privileges, by setting crafted MALLOCOPTIONS and MALLOCBUCKETS environment-variable values and then executing a setuid program.
Published: 2014-07-02T10:00:00.000Z
Updated: 2024-08-06T10:35:55.724Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4845 vulnerable 2026-06-08 05:02:52.925342 Details available
The FTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly manage privileges in an RBAC environment, which allows attackers to bypass intended file-read restrictions by leveraging the setuid installation of the ftp executable file.
Published: 2012-10-20T10:00:00.000Z
Updated: 2024-08-06T20:50:17.417Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4833 vulnerable 2026-06-08 05:02:52.869639 Details available
fuser in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly restrict the -k option, which allows local users to kill arbitrary processes via a crafted command line.
Published: 2012-10-01T18:00:00.000Z
Updated: 2024-08-06T20:50:17.513Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2200 vulnerable 2026-06-08 05:00:53.311552 Details available
The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain privileges by entering a command in a .forward file in a home directory.
Published: 2012-06-27T10:00:00.000Z
Updated: 2024-08-06T19:26:09.009Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2192 vulnerable 2026-06-08 05:00:53.273603 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0723 vulnerable 2026-06-08 05:00:44.620908 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.