16245 matches found
AIX 7.1 TL 3 : bind9 (IV68996)
CVE-2014-8500 ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service memory consumption and named crash via a large or infinite number of referrals. Please see following for more...
Vulnerability in AIX bind,Vulnerability in VIOS bind
IBM SECURITY ADVISORY First Issued: Tue Feb 24 11:33:18 CST 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bind9advisory7.asc https://aix.software.ibm.com/aix/efixes/security/bind9advisory7.asc...
AIX Java Advisory : java_feb2015_advisory.asc (POODLE)
The version of Java SDK installed on the remote host is affected by the following vulnerabilities : - A man-in-the-middle MitM information disclosure vulnerability known as POODLE. The vulnerability is due to the way SSL 3.0 handles padding bytes when decrypting messages encrypted using block...
Multiple vulnerabilities in current releases of IBM SDK Java Technology Edition; issues disclosed in the Oracle Feb 2015 Critical Patch Update vulnerability and two additional Vuln
IBM SECURITY ADVISORY First Issued: Thu Feb 19 10:53:54 CST 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javafeb2015advisory.asc https://aix.software.ibm.com/aix/efixes/security/javafeb2015advisory.asc...
AIX OpenSSL Advisory : openssl_advisory12.asc (FREAK)
The version of OpenSSL installed on the remote AIX host is affected by the following vulnerabilities : - The BIGNUM squaring BNsqr implementation does not properly calculate the square of a BIGNUM value. This allows remote attackers to defeat cryptographic protection mechanisms. CVE-2014-3570 - A...
Shell-Redirection-Race-Condition
This could result in a symbolic link attack that could be used to corrupt any file that the owner of the redirecting shell has access to write to. This issue affects those systems running vulnerable versions of bash, tcsh, cash, ksh and sh. ksh is reportedly not vulnerable for IBM AIX systems...
IBM-AIX-3.2.5-IFS
Under older versions of AIX By changing the IFS enviroment variable to / setuid root programs that use system or popen can be fooled into running user provided programs...
AIX 5.3 TL 12 : ntp (IV68427)
CVE-2014-9293 If no authentication key is defined in the ntp.conf file, a cryptographically-weak default key is generated. CVE-2014-9294 ntp-keygen before 4.2.7p230 uses a non-cryptographic random number generator with a weak seed to generate symmetric keys. CVE-2014-9295 A remote unauthenticated...
AIX 7.1 TL 2 : ntp (IV68429)
CVE-2014-9293 If no authentication key is defined in the ntp.conf file, a cryptographically-weak default key is generated. CVE-2014-9294 ntp-keygen before 4.2.7p230 uses a non-cryptographic random number generator with a weak seed to generate symmetric keys. CVE-2014-9295 A remote unauthenticated...
AIX 6.1 TL 9 : ntp (IV68428)
CVE-2014-9293 If no authentication key is defined in the ntp.conf file, a cryptographically-weak default key is generated. CVE-2014-9294 ntp-keygen before 4.2.7p230 uses a non-cryptographic random number generator with a weak seed to generate symmetric keys. CVE-2014-9295 A remote unauthenticated...
AIX 7.1 TL 3 : ntp (IV68430)
The version of NTP installed on the remote AIX host is affected by the following vulnerabilities : - A security weakness exists due to the configauth function improperly generating default keys when no authentication key is defined in the ntp.conf file. Key size is limited to 31 bits and the...
AIX 6.1 TL 8 : ntp (IV68426)
CVE-2014-9293 If no authentication key is defined in the ntp.conf file, a cryptographically-weak default key is generated. CVE-2014-9294 ntp-keygen before 4.2.7p230 uses a non-cryptographic random number generator with a weak seed to generate symmetric keys. CVE-2014-9295 A remote unauthenticated...
Network Time Protocol (NTP) vulnerability in AIX,Network Time Protocol (NTP) vulnerability in VIOS
IBM SECURITY ADVISORY First Issued: Tue Feb 10 12:06:45 CST 2015 |Updated: Thu Feb 12 10:54:48 CST 2015 |Corrected wrong CVE number |Corrected SP for 7100-02-07 |Updated Fri Feb 13 08:22:03 CST 2015 |Corrected typo in II. CVSS section |Updated Thu Feb 19 12:35:51 CST 2015 |Corrected upper fileset...
Multiple Security vulnerabilities in AIX OpenSSL
IBM SECURITY ADVISORY First Issued: Wed Feb 4 06:24:41 CST 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory12.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory12.asc...
AIX 6.1 TL 9 : lvm (IV67907)
The running of lquerylv command with variable DBGCMDLQUERYLV set may allow a local user to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory lvmadvisory.asc. include'deprecatednasllevel.inc';...
AIX NAS Advisory : nas_advisory2.asc
The version of the Network Authentication Service NAS installed on the remote AIX host is affected by a vulnerability related to Kerberos 5 which allows authenticated users to retrieve current keys, which can be used to forge tickets. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text ...
AIX 6.1 TL 8 : X11.base.lib (U867348)
The remote host is missing AIX PTF U867348, which is related to the security of the package X11.base.lib. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U867348. The text itself is copyright C...
AIX 7.1 TL 2 : X11.base.lib (U865341)
The remote host is missing AIX PTF U865341, which is related to the security of the package X11.base.lib. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U865341. The text itself is copyright C...
AIX NAS vulnerability
IBM SECURITY ADVISORY First Issued:Tue Jan 20 04:42:45 CST 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/nasadvisory2.asc https://aix.software.ibm.com/aix/efixes/security/nasadvisory2.asc...
