CVE-2017-1692

IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. IBM X-Force ID: 134067...

(bellmail) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect AIX (CVE-2017-1692),(bellmail) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect VIOS (CVE-2017-1692),(caccelstat) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect AIX (CVE-2017-1692),(iostat) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect AIX (CVE-2017-1692),(lquerypv) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect AIX (CVE-2017-1692),(lquerypv) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect VIOS (CVE-2017-1692),(restbyinode) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect AIX (CVE-2017-1692),(restbyinode) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect VIOS (CVE-2017-1692),(vmstat) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect AIX (CVE-2017-1692)

IBM SECURITY ADVISORY First Issued: Mon Feb 5 13:19:26 CST 2018 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/suidadvisory.asc https://aix.software.ibm.com/aix/efixes/security/suidadvisory.asc...

Vulnerability in OpenSSL affects AIX (CVE-2017-3737)

IBM SECURITY ADVISORY First Issued: Mon Jan 29 10:36:55 CST 2018 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory25.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory25.asc...

IBM has released AIX and VIOS iFixes in response to the vulnerabilities known as Spectre and Meltdown.,IBM has released VIOS and VIOS iFixes in response to the vulnerabilities known as Spectre and Meltdown.

wnadvisory.asc: Version 4 IBM SECURITY ADVISORY First Issued: Thu Jan 25 08:15:51 CST 2018 |Updated: Fri Aug 17 08:05:01 CDT 2018 |Update: Added a link to the bulletin for CVE-2017-5715, known as Spectre, | regarding updated iFixes that are only applicable to some POWER9 systems. | The bulletin i...

AIX 7.2 TL 0 : spectre_meltdown (IJ03034) (Meltdown) (Spectre)

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. C Tenable Network Security, Inc. The text in the description was extracted from AIX...

AIX 7.1 TL 5 : spectre_meltdown (IJ03033) (Meltdown) (Spectre)

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. C Tenable Network Security, Inc. The text in the description was extracted from AIX...

AIX 6.1 TL 9 : spectre_meltdown (IJ03030) (Meltdown) (Spectre)

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. C Tenable Network Security, Inc. The text in the description was extracted from AIX...

AIX 5.3 TL 12 : spectre_meltdown (IJ03029) (Meltdown) (Spectre)

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. C Tenable Network Security, Inc. The text in the description was extracted from AIX...

AIX 7.1 TL 4 : spectre_meltdown (IJ03032) (Meltdown) (Spectre)

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. C Tenable Network Security, Inc. The text in the description was extracted from AIX...

AIX 7.2 TL 2 : spectre_meltdown (IJ03036) (Meltdown) (Spectre)

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. C Tenable Network Security, Inc. The text in the description was extracted from AIX...

AIX 7.2 TL 1 : spectre_meltdown (IJ03035) (Meltdown) (Spectre)

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. C Tenable Network Security, Inc. The text in the description was extracted from AIX...

Oracle WebLogic Server WLS Security Component Deserialization Vulnerability

Added: 01/09/2018 BID: 101304 Background Oracle WebLogic Server formerly BEA WebLogic Server is a Java web application platform. Problem Oracle WebLogic Server has a vulnerability in the WLS Security wls-wsat component that could allow an unauthenticated remote attacker who has HTTP access to the...

Oracle WebLogic Server WLS Security Component Deserialization Vulnerability

Added: 01/09/2018 BID: 101304 Background Oracle WebLogic Server formerly BEA WebLogic Server is a Java web application platform. Problem Oracle WebLogic Server has a vulnerability in the WLS Security wls-wsat component that could allow an unauthenticated remote attacker who has HTTP access to the...

Oracle WebLogic Server WLS Security Component Deserialization Vulnerability

Added: 01/09/2018 BID: 101304 Background Oracle WebLogic Server formerly BEA WebLogic Server is a Java web application platform. Problem Oracle WebLogic Server has a vulnerability in the WLS Security wls-wsat component that could allow an unauthenticated remote attacker who has HTTP access to the...

pedagogie.ac-aix-marseille.fr XSS vulnerability

Open Bug Bounty ID: OBB-485043 Description| Value ---|--- Affected Website:| pedagogie.ac-aix-marseille.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

Vulnerability in OpenSSL affects AIX

IBM SECURITY ADVISORY First Issued: Thu Dec 14 14:57:00 CST 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory24.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory24.asc...

There are multiple vulnerabilities in IBM SDK Java Technology Edition

IBM SECURITY ADVISORY First Issued: Thu Dec 7 12:20:05 CST 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javaoct2017advisory.asc https://aix.software.ibm.com/aix/efixes/security/javaoct2017advisory.asc...

The vulnerability of the installp and updatep packages in the JRE/SDK of the IBM AIX operating system allows a attacker to manipulate the update process for files such as java.security, java.policy, and javaws.policy.

The vulnerability of the installp and updatep packages in the JRE/SDK of the IBM AIX operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to manipulate the update process for files such as java.security, java.policy, and...

Vulnerabilities in OpenSSH affect AIX.

IBM SECURITY ADVISORY First Issued: Tue Nov 14 09:46:19 CST 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory11.asc https://aix.software.ibm.com/aix/efixes/security/opensshadvisory11.asc...

There are multiple vulnerabilities in tcpdump that impact AIX.

IBM SECURITY ADVISORY First Issued: Wed Nov 8 09:27:01 CST 2017 |Updated: Wed Feb 28 09:33:13 CST 2018 |Update: Corrected the APARs listed under the APAR section. The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/tcpdumpadvisory3.asc...