16245 matches found
Vulnerability in MD5 Signature and Hash Algorithm affects OpenSSL on AIX
IBM SECURITY ADVISORY First Issued: Fri Jan 29 15:43:20 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory16.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory16.asc...
Security update for Java7 (important)
Update OpenJDK to 7u95 / IcedTea 2.6.4 including the following fixes: Security fixes - S8059054, CVE-2016-0402: Better URL processing - S8130710, CVE-2016-0448: Better attributes processing - S8132210: Reinforce JMX collector internals - S8132988: Better printing dialogues - S8133962,...
AIX 7.1 TL 4 : ntp (IV79944) (deprecated)
Network Time Protocol NTP is vulnerable to a denial of service, caused by an error in the sntp program. By sending specially crafted NTP packets, a remote attacker from within the local network could exploit this vulnerability to cause the application to enter into an infinite loop. Network Time...
AIX 6.1 TL 9 : ntp (IV79942) (deprecated)
Network Time Protocol NTP is vulnerable to a denial of service, caused by an error in the sntp program. By sending specially crafted NTP packets, a remote attacker from within the local network could exploit this vulnerability to cause the application to enter into an infinite loop. Network Time...
AIX 7.2 TL 0 : ntp (IV79945) (deprecated)
Network Time Protocol NTP is vulnerable to a denial of service, caused by an error in the sntp program. By sending specially crafted NTP packets, a remote attacker from within the local network could exploit this vulnerability to cause the application to enter into an infinite loop. Network Time...
AIX 5.3 TL 12 : ntp (IV79946) (deprecated)
Network Time Protocol NTP is vulnerable to a denial of service, caused by an error in the sntp program. By sending specially crafted NTP packets, a remote attacker from within the local network could exploit this vulnerability to cause the application to enter into an infinite loop. Network Time...
AIX OpenSSL Advisory : openssl_advisory15.asc
The version of OpenSSL installed on the remote AIX host is affected by multiple vulnerabilities : - A NULL pointer dereference flaw exists in file rsaameth.c when handling ASN.1 signatures that use the RSA PSS algorithm but are missing a mask generation function parameter. A remote attacker can...
AIX 7.1 TL 3 : ntp (IV79943) (deprecated)
The remote AIX host has a version of Network Time Protocol NTP installed that is affected by the following vulnerabilities : - A divide-by-zero error exists in file include/ntp.h when handling LOGTOD and ULOGTOD macros in a crafted NTP packet. An unauthenticated, remote attacker can exploit this,...
Vulnerabilities in NTP affect AIX,Vulnerabilities in NTP affect VIOS
IBM SECURITY ADVISORY First Issued: Thu Jan 21 09:13:20 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/ntpadvisory4.asc https://aix.software.ibm.com/aix/efixes/security/ntpadvisory4.asc...
Vulnerabilities in OpenSSL impact AIX
IBM SECURITY ADVISORY First Issued: Mon Jan 18 10:47:32 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory15.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory15.asc...
IBM Spectrum Scale and General Parallel File System Denial of Service Vulnerability
IBM Spectrum Scale and General Parallel File System GPFS are both products of IBM Corporation of the U.S.A. IBM GPFS is an enterprise file management system optimized for petabyte-scale storage management.IBM Spectrum Scale is a set of data and file management solutions based on IBM GPFS. IBM...
Null pointer dereference
IBM Spectrum Scale 4.1.1.x before 4.1.1.3 and General Parallel File System GPFS 3.5.x before 3.5.0.29 and 4.1.x through 4.1.0.8 on AIX allow local users to cause a denial of service incorrect pointer dereference and node crash via unspecified vectors...
CVE-2015-7403
CVE-2015-7403 affects IBM Spectrum Scale (GPFS) on AIX, with vulnerable components including Spectrum Scale 4.1.x (before 4.1.1.3) and GPFS 3.5.x and 4.1.x (before 4.1.0.8/3.5.0.29). Root cause described as a local denial-of-service due to a user pointer dereference that can crash the node. Affec...
AIX Java Advisory : java_oct2015_advisory.asc (October 2015 CPU)
The version of Java SDK installed on the remote AIX host is affected by multiple vulnerabilities in the following components : - 2D - CORBA - Deployment - JAXP - JGSS - Libraries - RMI - Security - Serialization %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'...
Multiple vulnerabilities in IBM Java SDK affect AIX
IBM SECURITY ADVISORY First Issued: Thu Dec 10 08:51:54 CST 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javaoct2015advisory.asc https://aix.software.ibm.com/aix/efixes/security/javaoct2015advisory.asc...
AIX 6.1 TL 9 : bos.net.tcp.server (U863668) (Bar Mitzvah)
The remote host is missing AIX PTF U863668, which is related to the security of the package bos.net.tcp.server. Product could allow a remote attacker to obtain sensitive information, caused by a design error when using the SSLv3 protocol. A remote user with the ability to conduct a...
AIX 6.1 TL 9 : bos.net.tcp.client (U861500)
The remote host is missing AIX PTF U861500, which is related to the security of the package bos.net.tcp.client. Product could allow a remote attacker to obtain sensitive information, caused by a design error when using the SSLv3 protocol. A remote user with the ability to conduct a...
IBM PowerHA SystemMirror on AIX超级用户权限提升漏洞
No description provided by source...
IBM PowerHA SystemMirror on AIX Superuser Elevation of Privilege Vulnerability
IBM PowerHA SystemMirror is a cluster solution from IBM USA. The solution supports cluster migration, failover and disaster recovery. A superuser elevation of privilege vulnerability exists in IBM PowerHA SystemMirror on AIX versions 6.1 and 7.1, which allows an authenticated remote user to perfo...
