16245 matches found
CVE-2015-5005
CSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform an "su root" action by leveraging presence on the cluster-wide password-change list...
Design/Logic Flaw
CSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform an "su root" action by leveraging presence on the cluster-wide password-change list...
CVE-2015-5005
CSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform an "su root" action by leveraging presence on the cluster-wide password-change list...
CVE-2015-5005
CVE-2015-5005 affects IBM PowerHA SystemMirror CSPOC on AIX 6.1 and 7.1. An authenticated remote user added to the cluster password-change list can exploit a shipped script to perform a privileged action, gaining root via an "su root" operation. The vulnerability is tied to the CSPOC feature that...
AIX 6.1 TL 8 : bind (IV78096)
ISC BIND is vulnerable to a denial of service, caused by the exit of a validating resolver due to an assertion failure in buffer.c. By parsing a malformed DNSSEC key, a remote attacker could exploit this vulnerability to cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security,...
AIX 7.1 TL 2 : bind (IV78094)
ISC BIND is vulnerable to a denial of service, caused by the exit of a validating resolver due to an assertion failure in buffer.c. By parsing a malformed DNSSEC key, a remote attacker could exploit this vulnerability to cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security,...
AIX 7.1 TL 3 : bind (IV78095)
ISC BIND is vulnerable to a denial of service, caused by the exit of a validating resolver due to an assertion failure in buffer.c. By parsing a malformed DNSSEC key, a remote attacker could exploit this vulnerability to cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security,...
AIX 6.1 TL 9 : bind (IV78091)
ISC BIND is vulnerable to a denial of service, caused by the exit of a validating resolver due to an assertion failure in buffer.c. By parsing a malformed DNSSEC key, a remote attacker could exploit this vulnerability to cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security,...
AIX 5.3 TL 12 : bind (IV78092)
ISC BIND is vulnerable to a denial of service, caused by the exit of a validating resolver due to an assertion failure in buffer.c. By parsing a malformed DNSSEC key, a remote attacker could exploit this vulnerability to cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security,...
Design/Logic Flaw
The Reporting and Monitoring component in Tivoli Monitoring in IBM Tivoli Storage Manager 6.3 before 6.3.6 and 7.1 before 7.1.3 on Linux and AIX uses world-writable permissions for unspecified files, which allows local users to gain privileges by writing to a file...
CVE-2015-4927
The Reporting and Monitoring component in Tivoli Monitoring in IBM Tivoli Storage Manager 6.3 before 6.3.6 and 7.1 before 7.1.3 on Linux and AIX uses world-writable permissions for unspecified files, which allows local users to gain privileges by writing to a file...
CVE-2015-4927
IBM Tivoli Storage Manager’s Tivoli Monitoring Reporting and Monitoring component is affected in versions 6.3 prior to 6.3.6 and 7.1 prior to 7.1.3 on Linux and AIX. The issue is world-writable permissions on unspecified files, enabling local users to gain privileges by writing to a file. IBM’s s...
Vulnerability in BIND affects AIX,Vulnerability in BIND affects VIOS
IBM SECURITY ADVISORY First Issued: Tues Nov 3 09:00:00 CDT 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bindadvisory9.asc https://aix.software.ibm.com/aix/efixes/security/bindadvisory9.asc...
AIX 7.1 - lquerylv Local Privilege Escalation
AIX 7.1 - lquerylv Local Privilege Escalation !/bin/sh Exploit Title: AIX 7.1 lquerylv privilege escalation Date: 2015.10.30 Exploit Author: S2 Crew Hungary Vendor Homepage: www.ibm.com Software Link: - Version: - Tested on: AIX 7.1 7100-02-03-1334 CVE : CVE-2014-8904 From file writing to command...
AIX 7.1 - 'lquerylv' Local Privilege Escalation
!/bin/sh Exploit Title: AIX 7.1 lquerylv privilege escalation Date: 2015.10.30 Exploit Author: S2 Crew Hungary Vendor Homepage: www.ibm.com Software Link: - Version: - Tested on: AIX 7.1 7100-02-03-1334 CVE : CVE-2014-8904 From file writing to command execution ; export DBGCMDLQUERYLV=1 umask 0 l...
AIX 7.1 - lquerylv Local Privilege Escalation Vulnerability
Exploit for aix platform in category local exploits !/bin/sh Exploit Title: AIX 7.1 lquerylv privilege escalation Date: 2015.10.30 Exploit Author: S2 Crew Hungary Vendor Homepage: www.ibm.com Software Link: - Version: - Tested on: AIX 7.1 7100-02-03-1334 CVE : CVE-2014-8904 From file writing to...
AIX OpenSSH Advisory : openssh_advisory6.asc
The remote AIX host has a version of OpenSSH installed that is affected by the following vulnerabilities : - A flaw exists in the monitor component when handling extraneous username data in MONITORREQPAMINITCTX requests. A local attacker can exploit this issue to conduct an impersonation attack, ...
The vulnerability of the AIX operating system, which allows a perpetrator to increase their privileges
The vulnerability of the netstat component in the AIX operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow an attacker, who operates locally, to increase their privileges...
AIX OpenSSH Vulnerability
IBM SECURITY ADVISORY First Issued: Wed Oct 21 09:17:40 CDT 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory6.asc https://aix.software.ibm.com/aix/efixes/security/opensshadvisory6.asc...
