AIX 7.1 TL 1 : bos.net.tcp.server (U855824)

The remote host is missing AIX PTF U855824, which is related to the security of the package bos.net.tcp.server. If specific combinations of RDATA are loaded into a nameserver, either via cache or an authoritative zone, a subsequent query for a related record will cause named to lock up...

AIX 7.1 TL 1 : bos.mp64 (U854884)

The remote host is missing AIX PTF U854884, which is related to the security of the package bos.mp64. The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under...

AIX 7.1 : bos.mp64 (U854839)

The remote host is missing AIX PTF U854839, which is related to the security of the package bos.mp64. The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under...

AIX 7.1 : bos.rte.filesystem (U854841)

The remote host is missing AIX PTF U854841, which is related to the security of the package bos.rte.filesystem. IBM AIX is vulnerable to a denial of service, caused by improper restrictions on the fuser command. A local attacker could exploit this vulnerability via the -k argument to kill a proce...

AIX 7.1 TL 1 : bos.rte.filesystem (U854868)

The remote host is missing AIX PTF U854868, which is related to the security of the package bos.rte.filesystem. IBM AIX is vulnerable to a denial of service, caused by improper restrictions on the fuser command. A local attacker could exploit this vulnerability via the -k argument to kill a proce...

AIX 7.1 : bos.net.tcp.server (U857842)

The remote host is missing AIX PTF U857842, which is related to the security of the package bos.net.tcp.server. If specific combinations of RDATA are loaded into a nameserver, either via cache or an authoritative zone, a subsequent query for a related record will cause named to lock up...

CVE-2013-0572

Cross-site scripting XSS vulnerability in IBM Document Connect for Application Support Facility aka DC4ASF before 1.0.0.1218 in Application Support Facility ASF 3.4 for z/OS on Windows, Linux, and AIX allows remote authenticated users to inject content, and conduct phishing attacks, via unspecifi...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Document Connect for Application Support Facility aka DC4ASF before 1.0.0.1218 in Application Support Facility ASF 3.4 for z/OS on Windows, Linux, and AIX allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Document Connect for Application Support Facility aka DC4ASF before 1.0.0.1218 in Application Support Facility ASF 3.4 for z/OS on Windows, Linux, and AIX allows remote authenticated users to inject content, and conduct phishing attacks, via unspecifi...

CVE-2013-0572

CVE-2013-0572 affects IBM Document Connect for Application Support Facility (DC4ASF) before 1.0.0.1218 in ASF 3.4 for z/OS, Windows, Linux, and AIX. The vulnerability is a cross-site scripting (XSS) issue that could allow remote authenticated users to inject content and conduct phishing attacks v...

AIX 7.1 : bos.net.tcp.client (U852816)

The remote host is missing AIX PTF U852816, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U852816. The text itself is copyright C...

AIX 7.1 TL 1 : bos.net.tcp.client (U857181)

The remote host is missing AIX PTF U857181, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U857181. The text itself is copyright C...

AIX OpenSSH Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Mon Apr 8 15:19:58 CDT 2013 | Updated: Fri Aug 2 16:51:48 CDT 2013 | Update: Vulnerable fileset levels corrected | Update: VIOS correct versions The most recent version of this document is available here:...

AIX 6.1 TL 7 : bos.mp64 (U854618)

The remote host is missing AIX PTF U854618, which is related to the security of the package bos.mp64. The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under...

AIX 6.1 TL 6 : bos.net.tcp.server (U854732)

The remote host is missing AIX PTF U854732, which is related to the security of the package bos.net.tcp.server. If specific combinations of RDATA are loaded into a nameserver, either via cache or an authoritative zone, a subsequent query for a related record will cause named to lock up...

AIX 6.1 TL 7 : bos.net.tcp.server (U854646)

The remote host is missing AIX PTF U854646, which is related to the security of the package bos.net.tcp.server. If specific combinations of RDATA are loaded into a nameserver, either via cache or an authoritative zone, a subsequent query for a related record will cause named to lock up...

AIX 6.1 TL 6 : bos.mp64 (U854751)

The remote host is missing AIX PTF U854751, which is related to the security of the package bos.mp64. The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under...

AIX 6.1 TL 6 : bos.rte.filesystem (U855520)

The remote host is missing AIX PTF U855520, which is related to the security of the package bos.rte.filesystem. IBM AIX is vulnerable to a denial of service, caused by improper restrictions on the fuser command. A local attacker could exploit this vulnerability via the -k argument to kill a proce...

AIX 6.1 TL 7 : bos.rte.filesystem (U854603)

The remote host is missing AIX PTF U854603, which is related to the security of the package bos.rte.filesystem. IBM AIX is vulnerable to a denial of service, caused by improper restrictions on the fuser command. A local attacker could exploit this vulnerability via the -k argument to kill a proce...

Multiple OpenSSL vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Fri Mar 15 03:20:11 CDT 2013 The most recent version of this document is available here: | Updated: Wed Jun 5 10:22:29 CDT 2013 | Update: Fix available for FIPS version | Update: Corrected CVSS base score and vector...