AIX 7.2 TL 0 : bellmail (IV91010) (deprecated)

https://vulners.com/cve/CVE-2016-8972 https://vulners.com/cve/CVE-2016-8972 IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...

AIX 7.2 TL 1 : bellmail (IV91011) (deprecated)

https://vulners.com/cve/CVE-2016-8972 https://vulners.com/cve/CVE-2016-8972 IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...

AIX 7.1 TL 4 : bellmail (IV91008) (deprecated)

https://vulners.com/cve/CVE-2016-8972 https://vulners.com/cve/CVE-2016-8972 IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...

AIX 6.1 TL 9 : bellmail (IV91006) (deprecated)

https://vulners.com/cve/CVE-2016-8972 https://vulners.com/cve/CVE-2016-8972 IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...

AIX 7.1 TL 3 : bellmail (IV91007) (deprecated)

https://vulners.com/cve/CVE-2016-8972 https://vulners.com/cve/CVE-2016-8972 IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...

AIX 6.1 TL 9 : bind (IV91254) (deprecated)

https://vulners.com/cve/CVE-2016-8864 https://vulners.com/cve/CVE-2016-8864 ISC BIND is vulnerable to a denial of service, caused by the improper handling of responses containing a DNAME answer in db.c or resolver.c. By sending a recursive response, a remote attacker could exploit this...

AIX 7.1 TL 3 : bind (IV91214) (deprecated)

https://vulners.com/cve/CVE-2016-8864 https://vulners.com/cve/CVE-2016-8864 ISC BIND is vulnerable to a denial of service, caused by the improper handling of responses containing a DNAME answer in db.c or resolver.c. By sending a recursive response, a remote attacker could exploit this...

AIX 7.1 TL 4 : bind (IV91255) (deprecated)

https://vulners.com/cve/CVE-2016-8864 https://vulners.com/cve/CVE-2016-8864 ISC BIND is vulnerable to a denial of service, caused by the improper handling of responses containing a DNAME answer in db.c or resolver.c. By sending a recursive response, a remote attacker could exploit this...

There are two vulnerabilities in BIND that impact AIX.,Vulnerabilities in BIND impact AIX

IBM SECURITY ADVISORY First Issued: Thu Dec 15 22:06:41 CST 2016 |Updated: Thu Dec 29 12:28:16 CST 2016 |Update: New iFixes provided for AIX 5.3.12.9, 6.1.9.6, 6.1.9.8, |7.1.4.1, 7.1.4.3, 7.2.0.0, 7.2.0.1, 7.2.0.2, 7.2.1.0, 7.2.1.1 |Updated: Wed Feb 8 16:52:50 CST 2017 |Update: New iFix provided...

Vulnerability in bellmail affects AIX,Vulnerability in bellmail affects VIOS

IBM SECURITY ADVISORY First Issued: Thu Dec 15 15:12:23 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bellmailadvisory.asc https://aix.software.ibm.com/aix/efixes/security/bellmailadvisory.asc...

APSB16-40 Security updates available for Adobe Experience Manager Forms (LiveCycle)

Adobe has released security updates for Adobe Experience Manager AEM Forms on Windows, Linux, Solaris and AIX. These updates resolve two important input validation issues that could be used in cross-site scripting attacks CVE-2016-6933 and CVE-2016-6934. Adobe recommends users apply the available...

AIX 7.1 TL 4 : pconsole (IV89737)

https://vulners.com/cve/CVE-2016-0266 https://vulners.com/cve/CVE-2016-0266 IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via unspecified vectors. %NASLMINLEVEL 70300 C...

AIX 6.1 TL 9 : pconsole (IV89739)

https://vulners.com/cve/CVE-2016-0266 https://vulners.com/cve/CVE-2016-0266 IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via unspecified vectors. %NASLMINLEVEL 70300 C...

Vulnerability in pConsole impacts AIX,pConsole on AIX does not support TLS 1.2.

IBM SECURITY ADVISORY First Issued: Fri Dec 2 15:01:37 CST 2016 |Updated: Mon May 1 16:30:43 CDT 2017 |Update: Bulletin updated to include ifix for AIX level 7.1.3 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/pconsoleadvisory2.asc...

AIX OpenSSH Advisory : openssh_advisory9.asc

The remote AIX host has a version of OpenSSH installed that is affected by the following vulnerabilities : - An elevation of privilege vulnerability exists in the dosetupenv function within file session.c when handling user-supplied environmental variables. A local attacker can exploit this to ga...

AIX OpenSSL Advisory : openssl_advisory21.asc (SWEET32)

The version of OpenSSL installed on the remote AIX host is affected by the following vulnerabilities : - Multiple integer overflow conditions exist in s3srvr.c, sslsess.c, and t1lib.c due to improper use of pointer arithmetic for heap-buffer boundary checks. An unauthenticated, remote attacker ca...

Vulnerabilities in BIND impact AIX,Vulnerabilities in BIND impact VIOS

IBM SECURITY ADVISORY First Issued: Fri Nov 18 08:19:36 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bindadvisory13.asc https://aix.software.ibm.com/aix/efixes/security/bindadvisory13.asc...

AIX Java Advisory : java_july2016_advisory.asc (July 2016 CPU)

The version of Java SDK installed on the remote AIX host is affected by multiple vulnerabilities in the following subcomponents : - An unspecified flaw exists in the Networking subcomponent that allows a local attacker to impact integrity. CVE-2016-3485 - An unspecified flaw exists in the...

AIX 6.1 TL 9 : bind (IV89828) (deprecated)

https://vulners.com/cve/CVE-2016-2776 https://vulners.com/cve/CVE-2016-2776 ISC BIND is vulnerable to a denial of service, caused by an assertion failure in buffer.c while a nameserver is building responses to a specifically constructed request. By sending a specially crafted DNS packet, a remote...

AIX 7.2 TL 0 : bind (IV89831) (deprecated)

https://vulners.com/cve/CVE-2016-2776 https://vulners.com/cve/CVE-2016-2776 ISC BIND is vulnerable to a denial of service, caused by an assertion failure in buffer.c while a nameserver is building responses to a specifically constructed request. By sending a specially crafted DNS packet, a remote...