AIX printer commands vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Wed Sept 25 15:55:39 CDT 2013 | Updated: Wed Feb 26 12:48:22 CDT 2014 | Update: Modified APAR availability dates and corrected | some APAR SP levels. | Update: 1. Replaced ifixes to resolve a prerequisite issue. | 2...

IBM AIX 6.1 / 7.1 - Local root Privilege Escalation Vulnerability

Exploit for aix platform in category local exploits !/bin/sh Exploit Title: IBM AIX 6.1 / 7.1 local root privilege escalation Date: 2013-09-24 Exploit Author: Kristian Erik Hermansen Vendor Homepage: http://www.ibm.com Software Link: http://www-03.ibm.com/systems/power/software/aix/about.html...

IBM AIX 6.1 / 7.1 Local Root Privilege Escalation

!/bin/sh Exploit Title: IBM AIX 6.1 / 7.1 local root privilege escalation Date: 2013-09-24 Exploit Author: Kristian Erik Hermansen Vendor Homepage: http://www.ibm.com Software Link: http://www-03.ibm.com/systems/power/software/aix/about.html Version: IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26...

IBM AIX 6.17.1 - Local Privilege Escalation

IBM AIX 6.17.1 - Local Privilege Escalation Exploit-DB Note: Screenshot provided by exploit author !/bin/sh Exploit Title: IBM AIX 6.1 / 7.1 local root privilege escalation Date: 2013-09-24 Exploit Author: Kristian Erik Hermansen Vendor Homepage: http://www.ibm.com Software Link:...

IBM AIX 6.1/7.1 - Local Privilege Escalation

Exploit-DB Note: Screenshot provided by exploit author !/bin/sh Exploit Title: IBM AIX 6.1 / 7.1 local root privilege escalation Date: 2013-09-24 Exploit Author: Kristian Erik Hermansen Vendor Homepage: http://www.ibm.com Software Link: http://www-03.ibm.com/systems/power/software/aix/about.html...

ibstat $PATH Privilege Escalation

This module exploits the trusted $PATH environment variable of the SUID binary "ibstat". Module Options msf use exploit/aix/local/ibstat/path msf undefinedpath show actions ...actions... msf undefinedpath set ACTION msf undefinedpath show options ...show and set options... msf undefinedpath run...

AIX PowerHA Cluster Management Unspecified Remote Configuration Manipulation

An unspecified vulnerability in the IBM PowerHA Cluster Management monitoring of port 6177 could allow a remote attacker to make unauthorized changes the remote host's AIX configuration. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

AIX 6.1 TL 7 : bos.net.tcp.client (U857721)

The remote host is missing AIX PTF U857721, which is related to the security of the package bos.net.tcp.client. If an AIX machine has IPv6 address configured, and if a malformed IPv6 packet in a specific format is sent to that machine, the machine can hang while processing that packet. The proble...

AIX 6.1 TL 6 : devices.common.IBM.ib.rte (U857762)

The remote host is missing AIX PTF U857762, which is related to the security of the package devices.common.IBM.ib.rte. Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority. %NASLMINLEVEL 70300 C...

AIX 6.1 TL 6 : bos.perf.perfstat (U857768)

The remote host is missing AIX PTF U857768, which is related to the security of the package bos.perf.perfstat. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U857768. The text itself is copyright C...

AIX 6.1 TL 7 : devices.common.IBM.ib.rte (U859167)

The remote host is missing AIX PTF U859167, which is related to the security of the package devices.common.IBM.ib.rte. Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority. %NASLMINLEVEL 70300 C...

AIX 6.1 TL 6 : bos.net.tcp.client (U857748)

The remote host is missing AIX PTF U857748, which is related to the security of the package bos.net.tcp.client. If an AIX machine has IPv6 address configured, and if a malformed IPv6 packet in a specific format is sent to that machine, the machine can hang while processing that packet. The proble...

AIX 7.1 : bos.mp64 (U857885)

The remote host is missing AIX PTF U857885, which is related to the security of the package bos.mp64. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U857885. The text itself is copyright C...

AIX 7.1 : bos.perf.perfstat (U858372)

The remote host is missing AIX PTF U858372, which is related to the security of the package bos.perf.perfstat. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U858372. The text itself is copyright C...

AIX 7.1 TL 1 : devices.common.IBM.ib.rte (U855867)

The remote host is missing AIX PTF U855867, which is related to the security of the package devices.common.IBM.ib.rte. Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority. %NASLMINLEVEL 70300 C...

AIX 7.1 / 7.1 TL 3 : devices.common.IBM.ib.rte (U858349)

The remote host is missing AIX PTF U858349, which is related to the security of the package devices.common.IBM.ib.rte. Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority. %NASLMINLEVEL 70300 C...

AIX 7.1 : bos.net.tcp.client (U858320)

The remote host is missing AIX PTF U858320, which is related to the security of the package bos.net.tcp.client. AIX system set up with stock sendmail will run arbitrary code through a users .forward. This apples to sendmailssl and sendmailnossl. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

AIX 7.1 TL 2 : devices.common.IBM.ib.rte (U857552)

The remote host is missing AIX PTF U857552, which is related to the security of the package devices.common.IBM.ib.rte. Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority. %NASLMINLEVEL 70300 C...

AIX 6.1 TL 8 : devices.common.IBM.ib.rte (U855978)

The remote host is missing AIX PTF U855978, which is related to the security of the package devices.common.IBM.ib.rte. Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority. %NASLMINLEVEL 70300 C...

AIX 6.1 TL 8 : bos.net.tcp.client (U855964)

The remote host is missing AIX PTF U855964, which is related to the security of the package bos.net.tcp.client. If an AIX machine has IPv6 address configured, and if a malformed IPv6 packet in a specific format is sent to that machine, the machine can hang while processing that packet. The proble...