AIX 7.2 TL 0 : sysproc (IV91456)

https://vulners.com/cve/CVE-2016-8944 https://vulners.com/cve/CVE-2016-8944 IBM AIX allows a local user to open a file with a specially crafted argument that would crash the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security...

AIX 7.2 TL 1 : sysproc (IV90234)

https://vulners.com/cve/CVE-2016-8944 https://vulners.com/cve/CVE-2016-8944 IBM AIX allows a local user to open a file with a specially crafted argument that would crash the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security...

AIX 7.2 TL 0 : bellmail (IV92241) (deprecated)

https://vulners.com/cve/CVE-2017-1093 https://vulners.com/cve/CVE-2017-1093 IBM AIX could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...

MySQL Cluster 7.2.x < 7.2.26 Multiple DoS (January 2017 CPU)

The version of MySQL Cluster running on the remote host is 7.2.x prior to 7.2.26. It is, therefore, affected by multiple denial of service vulnerabilities : - An overflow condition exists in the NDBAPI subcomponent that allows an unauthenticated, remote attacker to cause a denial of service...

AIX 7.2 TL 1 : bind (IV91257) (deprecated)

https://vulners.com/cve/CVE-2016-8864 https://vulners.com/cve/CVE-2016-8864 ISC BIND is vulnerable to a denial of service, caused by the improper handling of responses containing a DNAME answer in db.c or resolver.c. By sending a recursive response, a remote attacker could exploit this...

IBM AIX 6.17.17.2 - Bellmail Local Privilege Escalation

IBM AIX 6.17.17.2 - Bellmail Local Privilege Escalation !/usr/bin/sh CVE-2016-8972/bellmailroot.sh: IBM AIX Bellmail local root Affected versions: AIX 6.1, 7.1, 7.2 VIOS 2.2.x Fileset Lower Level Upper Level KEY --------------------------------------------------------- bos.net.tcp.client 6.1.9.0...

IBM AIX 6.1 / 7.1 / 7.2 Bellmail Privilege Escalation

!/usr/bin/sh CVE-2016-8972/bellmailroot.sh: IBM AIX Bellmail local root Affected versions: AIX 6.1, 7.1, 7.2 VIOS 2.2.x Fileset Lower Level Upper Level KEY --------------------------------------------------------- bos.net.tcp.client 6.1.9.0 6.1.9.200 keywfs bos.net.tcp.client 7.1.3.0 7.1.3.47...

AIX 7.2 TL 0 : bellmail (IV91010) (deprecated)

https://vulners.com/cve/CVE-2016-8972 https://vulners.com/cve/CVE-2016-8972 IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...

AIX 7.2 TL 1 : bellmail (IV91011) (deprecated)

https://vulners.com/cve/CVE-2016-8972 https://vulners.com/cve/CVE-2016-8972 IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...

OpenSSH 7.2 Denial Of Service

Title : OpenSSH before 7.3 Crypt CPU Consumption DoS Vulnerability Author : Kashinath T [email protected] www.secpod.com Vendor : http://www.openssh.com/ Software : http://www.openssh.com/ Version : OpenSSH before 7.3 Tested on : Ubuntu 16.04 LTS, Centos 7 CVE : CVE-2016-6515 Date : 20-10-201...

OpenSSH 7.2 - Denial of Service

OpenSSH 7.2 - Denial of Service Title : OpenSSH before 7.3 Crypt CPU Consumption DoS Vulnerability Author : Kashinath T [email protected] www.secpod.com Vendor : http://www.openssh.com/ Software : http://www.openssh.com/ Version : OpenSSH before 7.3 Tested on : Ubuntu 16.04 LTS, Centos 7 CVE ...

IBM AIX 6.17.17.2.0.2 - lsmcode Local Privilege Escalation

IBM AIX 6.17.17.2.0.2 - lsmcode Local Privilege Escalation !/usr/bin/sh AIX lsmcode local root exploit. Affected: AIX 6.1/7.1/7.2.0.2 Blog post URL: https://rhinosecuritylabs.com/2016/11/03/unix-nostalgia-hunting-zeroday-vulnerabilities-ibm-aix/ lqueryroot.sh by @hxmonsegur 2016 //RSL...

AIX 7.2 TL 0 : lquerylv (IV88053)

https://vulners.com/cve/CVE-2016-6079 https://vulners.com/cve/CVE-2016-6079 AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from...

AIX 7.2 TL 0 : ntp (IV87939) (deprecated)

NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2015-7974 NTP could allow a remote authenticated attacker to conduct spoofing attacks, caused by a missing key check. An attacker could exploit this vulnerability to impersonate a peer. NTP could allow a local attacker to bypass...

qemu-kvm security update

1.5.3-105.el72.7 - kvm-block-iscsi-avoid-potential-overflow-of-acb-task-cdb.patch bz1358996 - Resolves: bz1358996 CVE-2016-5126 qemu-kvm: Qemu: block: iscsi: buffer overflow in iscsiaioioctl rhel-7.2.z 1.5.3-105.el72.6 - kvm-virtio-error-out-if-guest-exceeds-virtqueue-size.patch bz1359728 -...

AIX 7.2 TL 0 : mustendd (IV81357)

https://vulners.com/cve/CVE-2016-0281 IBM AIX Adapter FC5899 / FC1763 with 'jumboframes' disabled could allow a remote attacker to send specially crafted packets that would crash the adapter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX...

AIX 7.2 TL 0 : nettcp (IV86132) (SLOTH)

https://vulners.com/cve/CVE-2015-7575 The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle...

AIX 7.2 TL 0 : nettcp (IV86119) (SLOTH)

https://vulners.com/cve/CVE-2015-7575 The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle...

CVE-2016-2968

IBM Security QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to bypass authentication, and obtain sensitive information or modify data, via unspecified vectors...

CVE-2016-2868

IBM QRadar SIEM 7.2.x before 7.2.7 is affected by CVE-2016-2868 due to an XML External Entity (XXE) vulnerability in how XML data is processed. An attacker with administrator privileges can cause QRadar to read arbitrary files by sending specially crafted XML, exposing sensitive information. The ...