Vulnerability in use of socketpair

IBM SECURITY ADVISORY First Issued: Tue Jun 5 13:38:09 CDT 2012 | Updated: Wed Oct 3 10:13:19 CDT 2012 | Update: SP availability date and the lslpp assessment | Update: New ifixes for the latest SP's | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added KEYs for parsing purposes | 2. Moved t...

IBM AIX 'socketpair()'本地拒绝服务漏洞

BUGTRAQ ID: 53567 AIX是一个基于开放标准的UNIX操作系统，为用户提供企业信息技术基础架构。 IBM AIX 5.3在使用SOCKETPAIR调用后释放的套接字可导致系统崩溃，攻击者可利用此漏洞造成拒绝服务。 0 IBM AIX 5.3 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.ers.ibm.com/...

IBM AIX 'getpwnam()'本地权限提升漏洞(CVE-2012-0745)

BUGTRAQ ID: 53393 CVE ID: CVE-2012-0745 AIX是一个基于开放标准的UNIX操作系统，为用户提供企业信息技术基础架构。 IBM AIX 5.3、6.1、7.1在实现上存在本地权限提升漏洞，本地攻击者可利用此漏洞获取提升的权限。 0 IBM AIX 7.1 IBM AIX 6.1 IBM AIX 5.3 厂商补丁： IBM --- IBM已经为此发布了一个安全公告（ldapauthadvisory2）以及相应补丁: ldapauthadvisory2：Vulnerability in LDAP Authentication...

AIX 6.1 TL 5 : bos.net.tcp.client (U842598)

The remote host is missing AIX PTF U842598, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U842598. The text itself is copyright C...

AIX 7.1 : bos.net.tcp.client (U846526)

The remote host is missing AIX PTF U846526, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U846526. The text itself is copyright C...

AIX 6.1 TL 6 : bos.net.tcp.client (U849141)

The remote host is missing AIX PTF U849141, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U849141. The text itself is copyright C...

CVE-2012-0745

The getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not properly interact with customer-extended LDAP user filtering, which allows local users to gain privileges via unspecified vectors...

Design/Logic Flaw

The getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not properly interact with customer-extended LDAP user filtering, which allows local users to gain privileges via unspecified vectors...

CVE-2012-0745

CVE-2012-0745 affects IBM AIX 5.3, 6.1, 7.1 and VIOS 2.1.0.10 through 2.2.1.3. The root cause is an error in getpwnam() interaction with customer-extended LDAP user filtering, which can allow a local attacker to gain elevated privileges. The vulnerability leads to local privilege escalation (and ...

CVE-2012-0745

The getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not properly interact with customer-extended LDAP user filtering, which allows local users to gain privileges via unspecified vectors...

Wireshark: Dos due to integer overflow in IPTrace capture format parser

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service application crash via a long packet in an AIX iptrace file...

DEBIAN-CVE-2012-0067

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service application crash via a long packet in an AIX iptrace file...

CVE-2012-0067

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service application crash via a long packet in an AIX iptrace file...

CVE-2012-0067

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service application crash via a long packet in an AIX iptrace file...

Design/Logic Flaw

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service application crash via a long packet in an AIX iptrace file...

CVE-2012-0067

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service application crash via a long packet in an AIX iptrace file...

CVE-2012-0067

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service application crash via a long packet in an AIX iptrace file...

CVE-2012-0067

CVE-2012-0067 affects Wireshark; the vulnerability is in wiretap/iptrace.c where a long AIX iptrace file packet can crash the application. Affected versions are Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5. The issue allows remote attackers to trigger a denial of service (application cras...

EUVD-2012-0105

wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service application crash via a long packet in an AIX iptrace file...

PT-2012-2272 · Wireshark +3 · Wireshark +3

Name of the Vulnerable Software and Affected Versions: Wireshark versions 1.4.x through 1.4.10 Wireshark versions 1.6.x through 1.6.4 Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash, by sending a long packet in an AIX iptrace file...