AIX NTP v4 Advisory : ntp_advisory9.asc (IV96311) (IV96312)

The version of NTP installed on the remote AIX host is affected by the following vulnerabilities : - Multiple stack-based buffer overflow conditions exist in various wrappers around the ctlputdata function within file ntpd/ntpcontrol.c due to improper validation of certain input from the ntp.conf...

AIX bellmail Advisory : bellmail_advisory.asc (IV91006) (IV91007) (IV91008) (IV91010) (IV91011)

The version of bellmail installed on the remote AIX host is affected by a privilege escalation vulnerability due the use of insecure permissions. A local attacker can exploit this, via a specially crafted command, to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

AIX NTP v3 Advisory : ntp_advisory8.asc (IV92194) (IV91803) (IV92193) (IV91951) (IV92192) (IV92067)

The version of NTP installed on the remote AIX host is affected by the following vulnerabilities : - A denial of service vulnerability exists in the broadcast mode replay prevention functionality. An unauthenticated, adjacent attacker can exploit this, via specially crafted broadcast mode NTP...

AIX bind Advisory : bind_advisory10.asc (IV80187) (IV80188) (IV80189) (IV80191) (IV80192)

The version of bind installed on the remote AIX host is affected by a denial of service vulnerability due to improper parsing of incorrect class attributes in db.c. An unauthenticated, remote attacker can exploit this, via a malformed class attribute, to trigger a REQUIRE assertion failure,...

AIX bind Advisory : bind_advisory14.asc (IV91214) (IV91253) (IV91254) (IV91255) (IV91256) (IV91257)

The version of bind installed on the remote AIX host is affected by the following vulnerabilities : - A denial of service vulnerability exists when handling malformed options sections. An unauthenticated, remote attacker can exploit this, via a specially crafted OPT resource record, to cause an...

AIX NTP v3 Advisory : ntp_advisory9.asc (IV96305) (IV96306) (IV96307) (IV96308) (IV96309) (IV96310)

The version of NTP installed on the remote AIX host is affected by the following vulnerabilities : - An out-of-bounds write error exists in the mx4200send function within file ntpd/refclockmx4200.c due to improper handling of the return value of the snprintf and vsnprintf functions. An...

AIX bind Advisory : bind_advisory11.asc (IV81278) (IV81279) (IV81280) (IV81281) (IV81282)

The version of bind installed on the remote AIX host is affected by a denial of service vulnerability due to improper handling of certain string formatting options. An authenticated, remote attacker can exploit this, via a malformed Address Prefix List APL record, to cause an INSIST assertion...

AIX bind Advisory : bind_advisory15.asc (IV93361) (IV93362) (IV93363) (IV93365) (IV93366) (IV93403)

The version of bind installed on the remote AIX host is affected by a denial of service vulnerability due to a flaw that is triggered during the handling of a specially crafted answer packet in a response to an RTYPE ANY query. An unauthenticated, remote attacker can exploit this to cause an...

AIX NTP v3 Advisory : ntp_advisory7.asc (IV87614) (IV87419) (IV87615) (IV87420) (IV87939)

The version of NTP installed on the remote AIX host is affected by the following vulnerabilities : - A time serving flaw exists in the trusted key system due to improper key checks. An authenticated, remote attacker can exploit this to perform impersonation attacks between authenticated peers...

AIX bind Advisory : bind_advisory12.asc (IV84456) (IV84457) (IV84458) (IV84459) (IV84947) (IV84984) (IV85296) (IV85297) (IV85298)

The version of bind installed on the remote AIX host is affected by the following vulnerabilities : - A denial of service vulnerability exists in files sexpr.c and alist.c when handling control channel packets. An unauthenticated, remote attacker can exploit this, via crafted packets sent to the...

There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX,There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.,There are multiple vulnerabilities in NTPv3 and NTPv4 that impact VIOS

IBM SECURITY ADVISORY First Issued: Thu Jul 6 14:53:51 CDT 2017 |Updated: Mon Nov 13 14:32:25 CST 2017 |Update 3: Clarified that AIX 7100-04-05, 7200-00-05, and 7200-01-03 are | impacted. An additional iFix is provided for AIX 7100-04-05. The | iFixes already provided for 7200-00 and 7200-01 cove...

There are multiple vulnerabilities in IBM SDK Java Technology Edition

IBM SECURITY ADVISORY First Issued:Wed Jun 21 15:44:57 CDT 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javaapr2017advisory.asc https://aix.software.ibm.com/aix/efixes/security/javaapr2017advisory.asc...

VulnCheck KEV: CVE-2002-1689

Unknown vulnerability in the login program on AIX before 4.0 could allow remote users to specify 100 or more environment variables when logging on, which exceeds the length of a certain string, possibly triggering a buffer overflow...

Command Injection

pidusage is vulnerable to command injections. Unsanitized input given to childprocess.exec resulting in command injection in the ps method. This is caused because the pid is never cast to an integer as it expects. Windows and Linux are not vulnerable but Darwin, SunOS, FreeBSD, and AIX are...

AIX 7.1 TL 3 : tcpdump (IV94727)

Vulnerabilities in tcpdump affect AIX : https://vulners.com/cve/CVE-2017-12993 https://vulners.com/cve/CVE-2017-12993 tcpdump could allow a remote attacker to obtain sensitive information, caused by a buffer overread memory in the Juniper component. By sending a specially crafted request, an...

AIX 7.2 TL 0 : tcpdump (IV94724)

Vulnerabilities in tcpdump affect AIX : https://vulners.com/cve/CVE-2017-12993 https://vulners.com/cve/CVE-2017-12993 tcpdump could allow a remote attacker to obtain sensitive information, caused by a buffer overread memory in the Juniper component. By sending a specially crafted request, an...

AIX 6.1 TL 9 : tcpdump (IV94728)

Vulnerabilities in tcpdump affect AIX : https://vulners.com/cve/CVE-2017-12993 https://vulners.com/cve/CVE-2017-12993 tcpdump could allow a remote attacker to obtain sensitive information, caused by a buffer overread memory in the Juniper component. By sending a specially crafted request, an...

AIX 7.2 TL 1 : tcpdump (IV94723)

Vulnerabilities in tcpdump affect AIX : https://vulners.com/cve/CVE-2017-12993 https://vulners.com/cve/CVE-2017-12993 tcpdump could allow a remote attacker to obtain sensitive information, caused by a buffer overread memory in the Juniper component. By sending a specially crafted request, an...

AIX 5.3 TL 12 : tcpdump (IV94729)

Vulnerabilities in tcpdump affect AIX : https://vulners.com/cve/CVE-2017-12993 https://vulners.com/cve/CVE-2017-12993 tcpdump could allow a remote attacker to obtain sensitive information, caused by a buffer overread memory in the Juniper component. By sending a specially crafted request, an...

AIX 7.1 TL 4 : tcpdump (IV94726)

Vulnerabilities in tcpdump affect AIX : https://vulners.com/cve/CVE-2017-12993 https://vulners.com/cve/CVE-2017-12993 tcpdump could allow a remote attacker to obtain sensitive information, caused by a buffer overread memory in the Juniper component. By sending a specially crafted request, an...