AIX Java Advisory : java_jan2016_advisory.asc (January 2016 CPU) (SLOTH)

The version of Java SDK installed on the remote AIX host is affected by multiple vulnerabilities in the following components : - 2D - AWT - IBM J9 JVM - JAXP - JMX - Libraries - Networking - Security %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

AIX 7.1 TL 3 : bos.net.tcp.server (U867669) (Bar Mitzvah)

The remote host is missing AIX PTF U867669, which is related to the security of the package bos.net.tcp.server. Product could allow a remote attacker to obtain sensitive information, caused by a design error when using the SSLv3 protocol. A remote user with the ability to conduct a...

AIX 7.1 TL 3 : bos.net.tcp.client (U867672)

The remote host is missing AIX PTF U867672, which is related to the security of the package bos.net.tcp.client. Product could allow a remote attacker to obtain sensitive information, caused by a design error when using the SSLv3 protocol. A remote user with the ability to conduct a...

AIX 7.2 TL 0 : bind (IV80192) (deprecated)

ISC BIND is vulnerable to a denial of service, caused by an error in db.c when parsing incoming responses. A remote attacker could exploit this vulnerability to trigger a REQUIRE assertion failure and cause a denial of service. This plugin has been deprecated to better accommodate iFix superseden...

AIX 7.1 TL 4 : bind (IV80191) (deprecated)

ISC BIND is vulnerable to a denial of service, caused by an error in db.c when parsing incoming responses. A remote attacker could exploit this vulnerability to trigger a REQUIRE assertion failure and cause a denial of service. This plugin has been deprecated to better accommodate iFix superseden...

AIX 5.3 TL 12 : bind (IV80187) (deprecated)

ISC BIND is vulnerable to a denial of service, caused by an error in db.c when parsing incoming responses. A remote attacker could exploit this vulnerability to trigger a REQUIRE assertion failure and cause a denial of service. This plugin has been deprecated to better accommodate iFix superseden...

AIX 7.1 TL 3 : bind (IV80189) (deprecated)

ISC BIND is vulnerable to a denial of service, caused by an error in db.c when parsing incoming responses. A remote attacker could exploit this vulnerability to trigger a REQUIRE assertion failure and cause a denial of service. This plugin has been deprecated to better accommodate iFix superseden...

AIX 6.1 TL 9 : bind (IV80188) (deprecated)

ISC BIND is vulnerable to a denial of service, caused by an error in db.c when parsing incoming responses. A remote attacker could exploit this vulnerability to trigger a REQUIRE assertion failure and cause a denial of service. This plugin has been deprecated to better accommodate iFix superseden...

Vulnerability in BIND affects AIX,Vulnerability in BIND affects VIOS

IBM SECURITY ADVISORY First Issued: Thu Feb 25 09:58:38 CST 2016 |Updated: Wed Dec 6 10:17:27 CST 2017 |Update: Changed the impacted fileset for AIX 7.2 from bos.net.tcp.client | to bos.net.tcp.bindutils. The most recent version of this document is available here:...

Multiple vulnerabilities in IBM Java SDK affect AIX

IBM SECURITY ADVISORY First Issued: Thu Feb 25 08:44:57 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javajan2016advisory.asc https://aix.software.ibm.com/aix/efixes/security/javajan2016advisory.asc...

AIX 7.1 TL 3 : libxml2 (IV80586)

The remote AIX host has a version of libxml2 installed that is affected by the following vulnerabilities : - A heap-based buffer overflow condition exists in the xmlParseEntityDecl and xmlParseConditionalSections functions within file parser.c due to a failure to properly stop parsing invalid...

AIX 6.1 TL 9 : libxml2 (IV80588)

The remote AIX host has a version of libxml2 installed that is affected by the following vulnerabilities : - A heap-based buffer overflow condition exists in the xmlParseEntityDecl and xmlParseConditionalSections functions within file parser.c due to a failure to properly stop parsing invalid...

AIX 7.2 TL 0 : libxml2 (IV80616)

The remote AIX host has a version of libxml2 installed that is affected by the following vulnerabilities : - A heap-based buffer overflow condition exists in the xmlParseEntityDecl and xmlParseConditionalSections functions within file parser.c due to a failure to properly stop parsing invalid...

IBM Java SDK Security Bypass Vulnerability (CNVD-2016-01228)

The IBM Java SDK is a Java implementation for AIX and Linux platforms and is a software development kit. A security bypass vulnerability exists in the IBM Java SDK. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations within the context of a...

AIX 5.3 TL 12 : libxml2 (IV80617)

The remote AIX host has a version of libxml2 installed that is affected by the following vulnerabilities : - A heap-based buffer overflow condition exists in the xmlParseEntityDecl and xmlParseConditionalSections functions within file parser.c due to a failure to properly stop parsing invalid...

Vulnerabilities in LibXML2 affect AIX,Vulnerabilities in LibXML2 affect VIOS

IBM SECURITY ADVISORY First Issued: Mon Feb 22 08:06:13 CST 2016 |Updated: Thu Aug 11 12:11:35 CDT 2016 |Update: Changed the iFix name for the AIX 7.1.3 fix. No changes relevant | to AIX 7.1.3 were made to the fix. The most recent version of this document is available here:...

Vulnerability in NTPv4 affects AIX

IBM SECURITY ADVISORY First Issued: Mon Feb 22 08:06:13 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/ntpadvisory5.asc https://aix.software.ibm.com/aix/efixes/security/ntpadvisory5.asc...

AIX OpenSSH Advisory : openssh_advisory7.asc

The remote AIX host has a version of OpenSSH installed that is affected by the following vulnerabilities : - An information disclosure vulnerability exists in the resendbytes function in the undocumented roaming connection feature. An authenticated, remote attacker can exploit this vulnerability,...

AIX OpenSSL Advisory : openssl_advisory16.asc (SLOTH)

The remote AIX host has a version of OpenSSL installed that is affected by a collision-based forgery vulnerability, known as SLOTH Security Losses from Obsolete and Truncated Transcript Hashes, in the TLS protocol due to accepting RSA-MD5 signatures in the server signature within the TLS 1.2...

AIX OpenSSH Vulnerability

IBM SECURITY ADVISORY First Issued: Fri Jan 29 16:13:16 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory7.asc https://aix.software.ibm.com/aix/efixes/security/opensshadvisory7.asc...