Code injection

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in Korn Shell ksh to gain root privileges. IBM X-Force ID: 201478...

CVE-2021-29741

CVE-2021-29741 affects IBM AIX 7.1, 7.2 and VIOS 3.1, where a local user could exploit a vulnerability in Korn Shell (ksh) to gain root privileges. Root cause and details are provided by IBM’s ksh advisory: multiple AIX filesets (bos.rte.shell) with vulnerable ksh versions across TLs, and APAR-ba...

CVE-2021-29741

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in Korn Shell ksh to gain root privileges. IBM X-Force ID: 201478...

AIX 7.2 TL 3 : ksh (IJ32285)

https://vulners.com/cve/CVE-2021-29741 https://vulners.com/cve/CVE-2021-29741 IBM AIX could allow a local user to exploit a vulnerability in Korn Shell ksh to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security...

AIX 7.2 TL 4 : ksh (IJ31614)

https://vulners.com/cve/CVE-2021-29741 https://vulners.com/cve/CVE-2021-29741 IBM AIX could allow a local user to exploit a vulnerability in Korn Shell ksh to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security...

AIX 7.2 TL 5 : ksh (IJ30557)

https://vulners.com/cve/CVE-2021-29741 https://vulners.com/cve/CVE-2021-29741 IBM AIX could allow a local user to exploit a vulnerability in Korn Shell ksh to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security...

AIX 7.1 TL 5 : ksh (IJ31606)

https://vulners.com/cve/CVE-2021-29741 https://vulners.com/cve/CVE-2021-29741 IBM AIX could allow a local user to exploit a vulnerability in Korn Shell ksh to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security...

There is a vulnerability in Korn Shell (ksh) that affects AIX,There is a vulnerability in Korn Shell (ksh) that affects VIOS

IBM SECURITY ADVISORY First Issued: Fri Jul 30 14:43:36 CDT 2021 |Updated: Wed Aug 11 14:52:54 CDT 2021 |Update: Corrected the AIX 7.1 TL5 affected fileset levels. The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/kshadvisory.asc...

IBM AIX 权限许可和访问控制问题漏洞

IBM AIX is an open standards-based UNIX operating system developed by IBM for the IBM Power architecture. IBM AIX is vulnerable to privilege licensing and access control issues, and attackers can exploit vulnerabilities in Korn Shell ksh to gain root access...

AIX 7.2 TL 4 : bind (IJ33278)

https://vulners.com/cve/CVE-2021-25215 https://vulners.com/cve/CVE-2021-25215 ISC BIND is vulnerable to a denial of service, caused by an assertion failure while answering queries for DNAME records. By sending a query for DNAME records, an attacker could exploit this vulnerability to trigger a...

AIX 7.2 TL 5 : bind (IJ33279)

https://vulners.com/cve/CVE-2021-25215 https://vulners.com/cve/CVE-2021-25215 ISC BIND is vulnerable to a denial of service, caused by an assertion failure while answering queries for DNAME records. By sending a query for DNAME records, an attacker could exploit this vulnerability to trigger a...

CVE-2021-29741

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in Korn Shell ksh to gain root privileges. IBM X-Force ID: 201478...

AIX 7.2 TL 3 : bind (IJ33277)

https://vulners.com/cve/CVE-2021-25215 https://vulners.com/cve/CVE-2021-25215 ISC BIND is vulnerable to a denial of service, caused by an assertion failure while answering queries for DNAME records. By sending a query for DNAME records, an attacker could exploit this vulnerability to trigger a...

AIX 7.1 TL 5 : bind (IJ33276)

https://vulners.com/cve/CVE-2021-25215 https://vulners.com/cve/CVE-2021-25215 ISC BIND is vulnerable to a denial of service, caused by an assertion failure while answering queries for DNAME records. By sending a query for DNAME records, an attacker could exploit this vulnerability to trigger a...

There is a vulnerability in BIND that affects AIX.,There is a vulnerability in BIND that affects VIOS.

IBM SECURITY ADVISORY First Issued: Thu Jul 29 15:13:19 CDT 2021 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bindadvisory19.asc https://aix.software.ibm.com/aix/efixes/security/bindadvisory19.asc...

Security Bulletin: IBM Data Replication Affected by Multiple Vulnerabilities in IBM Java SDK

Summary This bulletin covers common Java SDK vulnerability findings in the IBM Java SDK packaged with this offering. Vulnerability Details CVEID: CVE-2019-11771 DESCRIPTION: Eclipse OpenJ9 could allow a local attacker to gain elevated privileges on the system, caused by the inclusion of unused...

IBM AIX Input Validation Error Vulnerability

IBM AIX is an open standards-based UNIX operating system developed by IBM for the IBM Power architecture. IBM AIX is vulnerable to an input validation error that allows a local user with higher group privileges to exploit a vulnerability in the lpd daemon. No detailed vulnerability details are...

Security Bulletin: Eclipse OpenJ9 could allow a local attacker to gain elevated privileges on the system and Multiple binaries in IBM SDK, Java Technology Edition on the AIX platform use insecure absolute RPATHs CVE-2019-4473 and CVE-2019-11771

Summary Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984. Eclipse OpenJ9 could allow a local attacker to gain elevated privileges ...

CVE-2021-29693

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user that is in the with elevated group privileges to cause a denial of service due to a vulnerability in the lpd daemon. IBM X-Force ID: 200255...

CVE-2021-29693

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user that is in the with elevated group privileges to cause a denial of service due to a vulnerability in the lpd daemon. IBM X-Force ID: 200255...