IBM Director Agent vulnerabilities

4 CVEs affecting IBM Director Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-4274, published 2010-11-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-1760, published 2004-01-21. High severity, CVSS 10.0. EPSS: 3.8% chance of exploitation in the next 30 days. The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain…
CVE-2004-1759, published 2004-01-21. Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days. Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port…
CVE-2010-1347, published 2010-04-12. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Director Agent 6.1 before 6.1.2.3 in IBM Systems Director on AIX and Linux uses incorrect permissions for the (1) diruninstall and (2) opt/ibm/director/bin/wcitinst scripts, which allows local users…
CVE-2010-4274, published 2010-11-17. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. reset_diragent_keys in the Common agent in IBM Systems Director 6.2.0 has 754 permissions, which allows local users to gain privileges by leveraging system group membership.