16245 matches found
Multiple vulnerabilities in current releases of the IBM SDK Java Technology Edition
IBM SECURITY ADVISORY First Issued: Mon Aug 18 14:04:26 CDT 2014 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javajul2014advisory.asc https://aix.software.ibm.com/aix/efixes/security/javajul2014advisory.asc...
Vulnerability in AIX bind,Vulnerability in VIOS bind
IBM SECURITY ADVISORY First Issued: Fri Aug 15 14:07:52 CDT 2014 |Updated: Fri Aug 22 10:29:06 CDT 2014 |Update: VIOS fileset names updated The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bind9advisory6.asc...
AIX libxml2 vulnerability,VIOS libxml2 vulnerability
IBM SECURITY ADVISORY First Issued: Fri Aug 15 10:26:30 CDT 2014 Updated: Fri Aug 22 08:17:41 CDT 2014 Update: fixed APAR availability dates |Update: Mon Aug 25 15:18:37 CDT 2014 |Update Corrected a couple Service Pack levels The most recent version of this document is available here:...
IBM Tivoli Storage Manager Server 6.1.x Multiple Vulnerabilities
The version of IBM Tivoli Storage Manager installed on the remote host is 6.1 running on Windows or AIX. It is, therefore, potentially affected by multiple flaws in its bundled SSL library: - A flaw that could allow a remote attacker to cause a denial of service via a specially crafted...
AIX Java Advisory : java_apr2014_advisory.asc
The version of Java SDK installed on the remote host is potentially affected by the following vulnerabilities : - There is an information disclosure flaw in libjpeg and libjpeg-turbo allowing remote attackers access to uninitialized memory via crafted JPEG images. CVE-2013-6629 - A vulnerability ...
AIX Java Advisory : java_jan2014_advisory.asc
The version of Java SDK installed on the remote host is potentially affected by the following vulnerabilities : - Vulnerabilities in Oracle Java allow a remote attacker to bypass security features through flaws in XML document parsing. CVE-2013-5878, CVE-2013-5910 - An information disclosure flaw...
ToolTalk rpc.ttdbserverd_tt_internal_realpath 缓冲区溢出漏洞 (AIX)
No description provided by source...
AIX Calendar Manager Service Daemon (rpc.cmsd) Opcode 21缓冲区溢出漏洞
No description provided by source...
CVE-2014-3074
The runtime linker in IBM AIX 6.1 and 7.1 and VIOS 2.2.x allows local users to create a mode-666 root-owned file, and consequently gain privileges, by setting crafted MALLOCOPTIONS and MALLOCBUCKETS environment-variable values and then executing a setuid program...
Design/Logic Flaw
The runtime linker in IBM AIX 6.1 and 7.1 and VIOS 2.2.x allows local users to create a mode-666 root-owned file, and consequently gain privileges, by setting crafted MALLOCOPTIONS and MALLOCBUCKETS environment-variable values and then executing a setuid program...
CVE-2014-3074
The CVE-2014-3074 incident affects IBM AIX 6.1/7.1 (and VIOS 2.2.x) where the runtime linker allows local privilege escalation by manipulating MALLOCOPTIONS/MALLOCBUCKETS and then running a setuid program to create a root-owned 666 file. The root cause is in the malloc subsystem used by the AIX r...
CVE-2014-3074
The runtime linker in IBM AIX 6.1 and 7.1 and VIOS 2.2.x allows local users to create a mode-666 root-owned file, and consequently gain privileges, by setting crafted MALLOCOPTIONS and MALLOCBUCKETS environment-variable values and then executing a setuid program...
CVE-2014-3074
The runtime linker in IBM AIX 6.1 and 7.1 and VIOS 2.2.x allows local users to create a mode-666 root-owned file, and consequently gain privileges, by setting crafted MALLOCOPTIONS and MALLOCBUCKETS environment-variable values and then executing a setuid program. Recent assessments: timb-machine ...
IBM AIX <= 5.3.0 - setlocale() Local Privilege Escalation Exploit
No description provided by source. setlocale exploit for aix 5.2 CVE-2006-4254 [email protected] from os import execve bof=a580+bbbbccccdddd\x2f\xf2\x28\x2f egg=\x602350 shellcode= by intropy at caughq.org \x7c\xa5\x2a\x79 xor. r5,r5,r5 \x40\x82\xff\xfd bnel shellcode \x7f\xe8\x02\xa6 mflr...
AIX <= 5.3.0 (invscout) Local Command Execution Vulnerability
No description provided by source. !/usr/bin/sh r00t exploit written for the invscout bug reported by Idefense labs http://www.idefense.com/application/poi/display?id=171&type=vulnerabilities coded by ri0t exploitation is trivial but automated with this script www.ri0tnet.net usage ./getr00t.sh :...
IBM AIX <= 4.2.1 snap Insecure Temporary File Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/375/info The snap command is a diagnostic utlitiy for gathering system information on AIX platforms. It can only be executed by root, but it copies various system files into /tmp/ibmsupt/ under /tmp/ibmsupt/general/ you...
IBM AIX 5.x Invscout Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13909/info invscout is prone to a local buffer overflow vulnerability. This issue presents itself because the application fails to carry out boundary checks on user-supplied data from the command line. /usr/sbin/invscout...
eXtremail 1.x/2.1 - Remote Format String Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/2908/info eXtremail is a freeware SMTP server available for Linux and AIX. eXtremail contains a format-string vulnerability in its logging mechanism. Attackers can send SMTP commands argumented with maliciously constructe...
IBM AIX 5.x Diag Local Privilege Escalation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/12041/info diag is reported prone to a local privilege escalation vulnerability. This issue is due to a failure of certain diag applications to properly implement security controls when executing an application specified ...
IBM AIX 6.1 / 7.1 - Local Root Privilege Escalation
No description provided by source. Exploit-DB Note: Screenshot provided by exploit author !/bin/sh Exploit Title: IBM AIX 6.1 / 7.1 local root privilege escalation Date: 2013-09-24 Exploit Author: Kristian Erik Hermansen [email protected] Vendor Homepage: http://www.ibm.com Software...