# CVEs published 2012-10-20

6 CVEs were published on October 20, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-2167](https://cve.now/CVE-2012-2167.md): The IBM XIV Storage System Gen3 before 11.1.0.a allows remote attackers to cause a denial of service (device outage) via TCP packets to unsp (no CVSS)
- [CVE-2012-4933](https://cve.now/CVE-2012-4933.md): The rtrlet web application in the Web Console in Novell ZENworks Asset Management (ZAM) 7.5 uses a hard-coded username of Ivanhoe and a hard (no CVSS)
- [CVE-2012-2971](https://cve.now/CVE-2012-2971.md): The server in CA ARCserve Backup r12.5, r15, and r16 on Windows does not properly process RPC requests, which allows remote attackers to exe (no CVSS)
- [CVE-2012-2972](https://cve.now/CVE-2012-2972.md): The (1) server and (2) agent components in CA ARCserve Backup r12.5, r15, and r16 on Windows do not properly validate RPC requests, which al (no CVSS)
- [CVE-2012-4826](https://cve.now/CVE-2012-4826.md): Stack-based buffer overflow in the SQL/PSM (aka SQL Persistent Stored Module) Stored Procedure (SP) infrastructure in IBM DB2 9.1, 9.5, 9.7 (no CVSS)
- [CVE-2012-4845](https://cve.now/CVE-2012-4845.md): The FTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly manage privileges in an RBAC environment, which allow (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-10-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.