171 matches found
CVE-2023-45165 IBM AIX denial of service
IBM AIX 7.2 and 7.3 could allow a non-privileged local user to exploit a vulnerability in the AIX SMB client to cause a denial of service. IBM X-Force ID: 267963...
AIX is vulnerable to denial of service due to AIXWindows
IBM SECURITY ADVISORY First Issued: Mon Dec 18 09:23:16 CST 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/aixwindowsadvisory.asc Security Bulletin: AIX is vulnerable to denial of service due to AIXWindows CVE-2023-45172...
Vulnerability fixed in IBM AIX
IBM has fixed a vulnerability in AIX. Through an error in the invscout command, a local malicious person can execute arbitrary execute arbitrary commands on the system. IBM has released updates to fix the vulnerability in AIX invscout. For more information, see:...
IBM AIX Denial of Service Vulnerability (CNVD-2023-95293)
IBM AIX Advanced Interactive eXecutive is a UNIX-based operating system developed by IBM. A denial-of-service vulnerability exists in IBM AIX, which can be exploited by an attacker to cause a target program or system to fail to function properly, thereby denying service to legitimate users...
Security Bulletin: AIX is vulnerable to sensitive information exposure due to Perl (CVE-2023-31484 and CVE-2023-31486)
Summary UPDATED Nov 2: iFixes are now available for Perl 5.28.1 and 5.34.1. Perl version 5.28.1.7 and higher, and Perl version 5.34.1.4 and higher, have a dependency on OpenSSL 3.0. The iFixes are offered in lieu of updating to OpenSSL 3.0 and Perl 5.28.1.8 and 5.34.1.4. The iFixes may be...
CVE-2023-26286
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX runtime services library to execute arbitrary commands. IBM X-Force ID: 248421...
PT-2023-2524 · Ibm · Vios +1
Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: The issue exists due to the lack of neutralization of special elements used in the invscout command of the IBM AIX operating system. Exploitation of this issue may allow an attack...
PT-2023-15543 · Ibm · Vios +1
Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: A buffer overflow vulnerability in X11 could allow a non-privileged local user to cause a denial of service or achieve arbitrary code execution. Recommendations: For IBM AIX...
CVE-2022-43848
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169...
PT-2022-26880 · Ibm · Vios +1
Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: The issue allows a local user with elevated privileges to exploit a vulnerability in the lpd daemon, causing a denial of service. Recommendations: For IBM AIX versions 7.1 through...
PT-2022-26878 · Ibm · Aix +2
Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: The issue allows a non-privileged local user to exploit a vulnerability in the AIX NFS kernel extension to cause a denial of service. Recommendations: For IBM AIX versions 7.1...
IBM AIX 安全漏洞
IBM AIX is an open standards-based UNIX operating system developed by International Business Machines IBM for the IBM Power architecture. an elevation of privilege vulnerability exists in IBM AIX versions 7.1, 7.2, 7.3 and VIOS version 3.1. A local attacker could exploit the vulnerability to gain...
IBM AIX 权限许可和访问控制问题漏洞
IBM AIX is an open standards-based UNIX operating system developed by IBM for the IBM Power architecture. IBM AIX is vulnerable to privilege licensing and access control issues, which stem from the fact that the vulnerability exists due to a mount command error. A local user can execute arbitrary...
IBM AIX 信息泄露漏洞
IBM AIX is an open standards-based UNIX operating system developed by IBM for the IBM Power architecture. An information disclosure vulnerability exists in IBM AIX, which can be exploited by attackers to obtain sensitive information...
IBM AIX Denial of Service Vulnerability
IBM AIX is an open standards-based UNIX operating system developed by IBM for the IBM Power architecture. A denial of service vulnerability exists in IBM AIX version 7.1, 7.2, and VIOS version 3.1. A local attacker could exploit this vulnerability to cause a denial of service...
VulnCheck KEV: CVE-2002-1689
Unknown vulnerability in the login program on AIX before 4.0 could allow remote users to specify 100 or more environment variables when logging on, which exceeds the length of a certain string, possibly triggering a buffer overflow...
IBM PowerHA for AIX Local Privilege Vulnerability
IBM PowerHA for AIX is a set of solutions that enable systems to cope with failures and reduce application downtime. A local elevation of privilege vulnerability exists in IBM PowerHA for AIX, which allows an attacker to exploit the vulnerability to elevate privileges and gain root privileges...
IBM AIX <= 3.2.5 IFS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/454/info Under older versions of AIX By changing the IFS enviroment variable to / setuid root programs that use system or popen can be fooled into running user provided programs. !/bin/csh IFS hole in AIX3.2 rmail gives...
AIX 5.3 TL 6 : bos.rte.control (U816674)
The remote host is missing AIX PTF U816674, which is related to the security of the package bos.rte.control. The reboot command contains a stack based buffer overflow. A local attacker in the shutdown group may exploit this overflow to execute arbitrary code with root privileges because the comma...
AIX <= 5.3.0 (invscout) Local Command Execution Vulnerability
No description provided by source. !/usr/bin/sh r00t exploit written for the invscout bug reported by Idefense labs http://www.idefense.com/application/poi/display?id=171&type=vulnerabilities coded by ri0t exploitation is trivial but automated with this script www.ri0tnet.net usage ./getr00t.sh :...