AIX 7.1 TL 4 : sendmail (IJ02917)

https://vulners.com/cve/CVE-2014-3956 https://vulners.com/cve/CVE-2014-3956 The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FDCLOEXEC flags, which allows local users to access unintended high-numbered file...

AIX 7.2 TL 2 : sendmail (IJ02920)

https://vulners.com/cve/CVE-2014-3956 https://vulners.com/cve/CVE-2014-3956 The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FDCLOEXEC flags, which allows local users to access unintended high-numbered file...

AIX 5.3 TL 12 : sendmail (IJ03273)

https://vulners.com/cve/CVE-2014-3956 https://vulners.com/cve/CVE-2014-3956 The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FDCLOEXEC flags, which allows local users to access unintended high-numbered file...

AIX 7.2 TL 0 : sendmail (IJ02918)

https://vulners.com/cve/CVE-2014-3956 https://vulners.com/cve/CVE-2014-3956 The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FDCLOEXEC flags, which allows local users to access unintended high-numbered file...

AIX 7.1 TL 5 : sendmail (IJ03121)

https://vulners.com/cve/CVE-2014-3956 https://vulners.com/cve/CVE-2014-3956 The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FDCLOEXEC flags, which allows local users to access unintended high-numbered file...

AIX 6.1 TL 9 : sendmail (IJ02915)

https://vulners.com/cve/CVE-2014-3956 https://vulners.com/cve/CVE-2014-3956 The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FDCLOEXEC flags, which allows local users to access unintended high-numbered file...

Vulnerability in sendmail impacts AIX (CVE-2014-3956),Vulnerability in sendmail impacts VIOS (CVE-2014-3956)

IBM SECURITY ADVISORY First Issued: Fri Apr 6 11:18:40 CDT 2018 |Updated: Mon Sep 17 09:18:47 CDT 2018 |Update: Clarified that AIX 7.2 TL0 SP6 and bos.net.tcp.sendmail fileset level | 7.2.0.3 are impacted. An iFix for AIX 7.2 TL0 SP6 is now available. The most recent version of this document is...

CVE-2018-8049

The Stealth endpoint in Unisys Stealth SVG 2.8.x, 3.0.x before 3.0.1999, 3.1.x, 3.2.x before 3.2.030, and 3.3.x before 3.3.016, when running on Linux and AIX, allows remote attackers to cause a denial of service crash via crafted packets...

Code injection

The Stealth endpoint in Unisys Stealth SVG 2.8.x, 3.0.x before 3.0.1999, 3.1.x, 3.2.x before 3.2.030, and 3.3.x before 3.3.016, when running on Linux and AIX, allows remote attackers to cause a denial of service crash via crafted packets...

CVE-2018-8049

The Stealth endpoint in Unisys Stealth SVG 2.8.x, 3.0.x before 3.0.1999, 3.1.x, 3.2.x before 3.2.030, and 3.3.x before 3.3.016, when running on Linux and AIX, allows remote attackers to cause a denial of service crash via crafted packets...

CVE-2018-8049

The Stealth endpoint in Unisys Stealth SVG 2.8.x, 3.0.x before 3.0.1999, 3.1.x, 3.2.x before 3.2.030, and 3.3.x before 3.3.016, when running on Linux and AIX, allows remote attackers to cause a denial of service crash via crafted packets...

CVE-2018-8049

CVE-2018-8049 affects Unisys Stealth SVG 2.8.x, 3.0.x before 3.0.1999, 3.1.x, 3.2.x before 3.2.030, and 3.3.x before 3.3.016 on Linux/AIX. The Stealth endpoint can be denied service via crafted packets, causing a crash. Connected documents do not provide additional concrete technical details (vul...

The vulnerability of the LVM system for managing logical volumes in the AIX operating system allows a hacker to gain root privileges.

The vulnerability of the LVM Logical Volume Manager system in the AIX operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating locally, to gain root privileges using the lquerylv command...

CVE-2018-1386

IBM Tivoli Workload Automation for AIX IBM Workload Scheduler 8.6, 9.1, 9.2, 9.3, and 9.4 contains directories with improper permissions that could allow a local user to with special access to gain root privileges. IBM X-Force ID: 138208...

Improper access control

IBM Tivoli Workload Automation for AIX IBM Workload Scheduler 8.6, 9.1, 9.2, 9.3, and 9.4 contains directories with improper permissions that could allow a local user to with special access to gain root privileges. IBM X-Force ID: 138208...

CVE-2018-1386

IBM Tivoli Workload Automation for AIX IBM Workload Scheduler 8.6, 9.1, 9.2, 9.3, and 9.4 contains directories with improper permissions that could allow a local user to with special access to gain root privileges. IBM X-Force ID: 138208...

CVE-2018-1386

IBM Tivoli Workload Scheduler (AIX) is affected by CVE-2018-1386 through user-space directory permission issues in SetGID/SetUID programs, enabling local privilege escalation by placing a malicious library in insecure directories. Affected products/versions: IBM Workload Scheduler Distributed 8.6...

CVE-2018-1386

IBM Tivoli Workload Automation for AIX IBM Workload Scheduler 8.6, 9.1, 9.2, 9.3, and 9.4 contains directories with improper permissions that could allow a local user to with special access to gain root privileges. IBM X-Force ID: 138208...

PT-2018-12226 · Ibm · Ibm Tivoli Workload Automation

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Workload Automation for AIX versions 8.6 through 9.4 Description: The issue is related to directories with improper permissions, which could allow a local user with special access to gain root privileges. Recommendations: For...

AIX OpenSSL Advisory : openssl_advisory23.asc

The version of OpenSSL installed on the remote AIX host is affected by a denial of service vulnerability in OpenSSL caused by an out-of-bounds read when using a specific cipher. By sending specially crafted truncated packets, a remote attacker could exploit this vulnerability using...