AIX bind Advisory : nettcp_advisory2.asc (IV86116) (IV86117) (IV86118) (IV86119) (IV86120) (IV86132)

The version of bind installed on the remote AIX host is affected by the following vulnerabilities : - The TLS protocol allows weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker can...

appli.ac-aix-marseille.fr XSS vulnerability

Vulnerable URL: https://appli.ac-aix-marseille.fr/login/ctlogon.jsp?CTORIGURL="\n Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline:...

CVE-2017-1541

A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy and javaws.policy files from being updated correctly. IBM X-Force ID: 130809...

CVE-2017-1541

A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy and javaws.policy files from being updated correctly. IBM X-Force ID: 130809...

Design/Logic Flaw

A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy and javaws.policy files from being updated correctly. IBM X-Force ID: 130809...

CVE-2017-1541

A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy and javaws.policy files from being updated correctly. IBM X-Force ID: 130809...

CVE-2017-1541

CVE-2017-1541 is an IBM AIX Java vulnerability where the JRE/SDK installp and updatep packages could fail to update the files java.security, java.policy, and javaws.policy. Affected: AIX 5.3, 6.1, 7.1, 7.2 (and VIOS 2.2.x); root cause is improper updating of security policy files, which may impac...

IBM AIX JRE/SDK installp and updatep package denial of service vulnerability

IBM AIX Advanced Interactive eXecutive is a UNIX operating system developed by IBM in the U.S. JRE/SDK installp and updatep packages are among the packages.JRE/SDK install packages are a JRE/SDK installation package; updatep packages are JRE/SDK update packages. JRE/SDK installp packages is a...

There is a vulnerability in the AIX IBM Java 6 SDK installp and updatep packages

IBM SECURITY ADVISORY First Issued: Mon Sep 18 09:05:13 CDT 2017 |Updated: Mon Oct 2 09:00:12 CDT 2017 |Update 1: Impacted fileset information and iFixes added for AIX Java 6 | VRMFs from 6.0.0.215 to 6.0.0.465. | Complete impacted filesets now listed as: | Java6.sdk: 6.0.0.215-6.0.0.645 |...

AIX Java Advisory : java_july2017_advisory.asc (July 2017 CPU)

The version of Java SDK installed on the remote AIX host is affected by multiple vulnerabilities in the following subcomponents : - A flaw exists in the J9 VM class verifier component that allows an unauthenticated, remote attacker to cause an escalation of privileges. CVE-2017-1376 - A flaw exis...

AIX Java Advisory : java_apr2017_advisory.asc (April 2017 CPU)

The version of Java SDK installed on the remote AIX host is affected by multiple vulnerabilities in the following subcomponents : - Multiple vulnerabilities exist in the zlib subcomponent that allow an unauthenticated, remote attacker to trigger denial of service conditions. CVE-2016-9840,...

AIX Java Advisory : java_jan2017_advisory.asc (January 2017 CPU) (SWEET32)

The version of Java SDK installed on the remote AIX host is affected by multiple vulnerabilities in the following subcomponents : - A vulnerability exists in the Libraries subcomponent, known as SWEET32, in the 3DES and Blowfish algorithms due to the use of weak 64-bit block ciphers by default. A...

There are multiple vulnerabilities in IBM SDK Java Technology Edition

IBM SECURITY ADVISORY First Issued: Fri Sep 1 08:58:20 CDT 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javajuly2017advisory.asc https://aix.software.ibm.com/aix/efixes/security/javajuly2017advisory.asc...

AIX bind Advisory : bind_advisory16.asc (IV98826) (IV98827)

The version of bind installed on the remote AIX host is affected by the following vulnerabilities : - A security bypass exists in the way BIND handles TSIG authentication for dynamic updates. A remote, unauthenticated attacker can exploit this, via a specially crafted request packet containing a...

There are vulnerabilities in BIND that impact AIX.

IBM SECURITY ADVISORY First Issued: Wed Aug 23 09:01:23 CDT 2017 |Updated: Mon Nov 13 14:29:35 CST 2017 |Update 2: Updated the APAR section to reflect that the relevant APARs are | shipping in 6100-09-11, 7100-04-06, 7200-00-06, and 7200-01-04. | Corrected the impacted upper level filesets for...

AIX NTP v4 Advisory : ntp_advisory5.asc (IV81129) (IV81130)

The remote AIX host has a version of Network Time Protocol NTP installed that has a vulnerability when ntp is started with the -g option. A remote, unauthenticated attacker could send crafted data to ntp which would enable the time to be changed, enabling further attacks. %NASLMINLEVEL 70300 C...

AIX NTP v3 Advisory : ntp_advisory4.asc (IV79942) (IV79943) (IV79944) (IV79945) (IV79946)

The remote AIX host has a version of Network Time Protocol NTP installed that is affected by the following vulnerabilities : - A divide-by-zero error exists in file include/ntp.h when handling LOGTOD and ULOGTOD macros in a crafted NTP packet. An unauthenticated, remote attacker can exploit this,...

AIX NTP v4 Advisory : ntp_advisory4.asc (IV79954) (IV79954)

The remote AIX host has a version of Network Time Protocol NTP installed that is affected by the following vulnerabilities : - A divide-by-zero error exists in file include/ntp.h when handling LOGTOD and ULOGTOD macros in a crafted NTP packet. An unauthenticated, remote attacker can exploit this,...

AIX bind Advisory : bind_advisory13.asc (IV89828) (IV89829) (IV89830) (IV89831) (IV90056)

The version of bind installed on the remote AIX host is affected by the following vulnerabilities : - A denial of service vulnerability exists due to an error in the lightweight resolver lwres protocol implementation when resolving a query name that, when combined with a search list entry, exceed...

AIX bellmail Advisory : bellmail_advisory2.asc (IV92238) (IV92240) (IV92241) (IV92242) (IV92250)

The version of bellmail installed on the remote AIX host is affected by a privilege escalation vulnerability. A local attacker can exploit this to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...