16249 matches found
CVE-2012-0723
Summary: Local denial of service on IBM AIX 5.3/6.1/7.1 and VIOS 2.2.1.4-FP-25 SP-02 due to a flaw in the dupmsg kernel call. Root cause: a kernel extension call is exported to user space without proper sanity checks, allowing a crafted application to crash the system. Impacted components: AIX ke...
Vulnerability in AIX system call
IBM SECURITY ADVISORY First Issued: Thu Jul 26 12:59:02 CDT 2012 | Update: Wed Oct 24 8:49:40 CDT 2012 | Update: Updated interim fix file names | Update: New ifixes for the latest SP's | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added KEYs for parsing purposes | 2. Moved to OpenSSL...
[security bulletin] HPSBGN02787 SSRT100876 rev.1 - HP AssetManager, Remote Cross Site Scripting (XSS) and Unauthorized Data Modification
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03403333 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03403333 Version: 1 HPSBGN02787...
Vulnerability in AIX sendmail
IBM SECURITY ADVISORY First Issued: Mon Jul 16 13:28:25 CDT 2012 | Updated: Tue Sept 27 9:50:28 CDT 2012 | Update: New ifixes to include sendmailssl and sendmailnossl | Update: Corrected file names | Update: New ifixes for the latest SP's | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added...
Vulnerability in AIX bind
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Fri Jul 13 13:28:29 CDT 2012 The most recent version of this document is available here: | Updated: Thu Oct 25 05:15:16 CDT 2012 | Update: New ifixes for the latest SP's | Update: Corrected file name...
IBM AIX TCP Large Send Denial of Service Vulnerability
Binary data aixicmpechoreplydos.nbin...
IBM AIX 7.1/6.1 Sendmail本地权限提升漏洞
Bugtraq ID: 54206 CVE ID: CVE-2012-2200 IBM AIX是一款商业执行的操作系统。 在处理用户$HOME/.forward文件中某些结构时sendmail存在错误，允许本地攻击者利用漏洞以root特权执行任意代码。 0 IBM AIX 7.1 IBM AIX 6.1 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： http://aix.software.ibm.com/aix/efixes/security/sendmail1advisory.asc...
CVE-2012-2200
The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain privileges by entering a command in a .forward file in a home directory...
Default configuration
The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain privileges by entering a command in a .forward file in a home directory...
CVE-2012-2200
The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain privileges by entering a command in a .forward file in a home directory...
CVE-2012-2200
The CVE-2012-2200 issue affects IBM AIX 6.1/7.1 (and VIOS 2.2.1.4-FP-25 SP-02) where the default sendmail configuration allows local users to gain root privileges by placing a command in a user’s .forward file. The root cause is execution of commands piped from the .forward mechanism within stock...
CVE-2012-2179
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...
Arbitrary file deletion
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...
CVE-2012-2179
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...
CVE-2012-2179
CVE-2012-2179 affects libodm.a on IBM AIX (versions 5.3, 6.1, 7.1) and allows local users to overwrite arbitrary files via a symlink attack on a temporary file. The issue is a file-overwrite vulnerability caused by the libodm implementation, with an additional note that CVE-2014-3977 exists becau...
Arbitary file overwrite symlink in libodm
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Thu Jun 20 13:00:02 CDT 2012 Updated: Mon Oct 29 11:43:29 CDT 2012 Update: IFIX and CSUM for 6100-07-04 Update: New ifixes for the latest SP's Updated: Thu May 23 11:04:10 CDT 2014 Update: New APAR/Interim Fixes...
CVE-2012-2192
The socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local users to cause a denial of service system crash via a crafted application that leverages the presence of a socket on the free list...
Code injection
The socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local users to cause a denial of service system crash via a crafted application that leverages the presence of a socket on the free list...
CVE-2012-2192
Summary: CVE-2012-2192 affects IBM AIX 5.3, 6.1, 7.1 and VIOS 2.2.1.4-FP-25 SP-02. Vulnerability: socketpair() usage can cause a local denial-of-service (system crash) when a socket remains on the free list, triggering a crash in the socket code path. Root cause: crash tied to how sockets are man...
CVE-2012-2192
The socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local users to cause a denial of service system crash via a crafted application that leverages the presence of a socket on the free list...