EMC Data Protection Advisor 5.8.1 - Denial of Service

EMC Data Protection Advisor 5.8.1 - Denial of Service Luigi Auriemma Application: EMC Data Protection Advisor http://www.emc.com/backup-and-recovery/data-protection-advisor/data-protection-advisor.htm Versions: = 5.8.1 Platforms: AIX, HP-UX, Linux, Solaris, Windows Bugs: A...

EMC Data Protection Advisor 5.8.1 - Denial of Service

Luigi Auriemma Application: EMC Data Protection Advisor http://www.emc.com/backup-and-recovery/data-protection-advisor/data-protection-advisor.htm Versions: = 5.8.1 Platforms: AIX, HP-UX, Linux, Solaris, Windows Bugs: A cProcessAuthenticationData NULL pointer B thread CPU 100% Exploitation: remot...

Multiple OpenSSL vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Wed Mar 21 13:02:49 CDT 2012 |Updated: Thu Mar 22 09:06:21 CDT 2012 |Added VIOS release reference |Updated: Tue Jun 5 11:06:56 CDT 2012 |Corrected FIPS version The most recent version of this document is available...

EMC NetWorker 7.6 sp3 - Denial of Service

Luigi Auriemma Application: EMC NetWorker Legato http://www.emc.com/backup-and-recovery/networker/networker.htm Versions: = 7.6 sp3 7.6.3.2 Build 860 Platforms: AIX, HP-UX, Linux, Solaris, Windows Bug: invalid read access Exploitation: remote Date: 14 Mar 2012 Author: Luigi Auriemma e-mail:...

CVE-2011-1385

IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.1.x and 2.2.x, allows remote attackers to cause a denial of service system crash via an ICMP Echo Reply packet that contains 1 in the Identifier field, a different vulnerability than CVE-2012-0194...

Code injection

IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.1.x and 2.2.x, allows remote attackers to cause a denial of service system crash via an ICMP Echo Reply packet that contains 1 in the Identifier field, a different vulnerability than CVE-2012-0194...

CVE-2011-1385

IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.1.x and 2.2.x, allows remote attackers to cause a denial of service system crash via an ICMP Echo Reply packet that contains 1 in the Identifier field, a different vulnerability than CVE-2012-0194...

CVE-2011-1385

CVE-2011-1385 affects IBM AIX platforms (AIX 5.3, 6.1, 7.1 and VIOS 2.1.x/2.2.x). A remote attacker could cause a denial of service (system crash) by sending a crafted ICMP Echo Reply with Identifier = 1. Connected advisories also map CVE-2012-0194 to the AIX bos.net.tcp.client component, where e...

CVE-2012-0194

The TCP implementation in IBM AIX 5.3, 6.1, and 7.1, when the Large Send Offload option is enabled, allows remote attackers to cause a denial of service assertion failure and panic via an unspecified series of packets...

Design/Logic Flaw

The TCP implementation in IBM AIX 5.3, 6.1, and 7.1, when the Large Send Offload option is enabled, allows remote attackers to cause a denial of service assertion failure and panic via an unspecified series of packets...

CVE-2012-0194

IBM AIX 5.3/6.1/7.1 TCP Large Send Offload (LSO) option vulnerability: when enabled, a remote attacker can trigger a DoS (assertion failure/panic) by sending a crafted packet sequence. Several AIX security advisories/PTFs address this issue (e.g., U841068, U843468, U846347, U849815, U849490, U849...

CVE-2012-0194

The TCP implementation in IBM AIX 5.3, 6.1, and 7.1, when the Large Send Offload option is enabled, allows remote attackers to cause a denial of service assertion failure and panic via an unspecified series of packets...

IBM AIX TCP栈拒绝服务漏洞

Bugtraq ID: 51864 CVE ID：CVE-2012-0194 IBM AIX是一款商业性质的操作系统 当在IBM AIX网络接口上启用TCP "Large Send Offload"选项时才能在一个错误，AIX允许远程攻击者对系统进行拒绝服务攻击。通过发送特殊构建的报文序列，攻击者可以利用此漏洞触发内核崩溃 0 IBM AIX 7.1 IBM AIX 6.1 IBM AIX 5.3 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息...

Vulnerability in AIX TCP stack,Vulnerability in VIOS TCP stack

IBM SECURITY ADVISORY First Issued: Fri Feb 3 10:20:44 CST 2012 | Updated: Mon Feb 6 08:56:46 CST 2012 | Updated AIX 53 TL 12 ifix | Updated: Wed Feb 8 16:18:36 CST 2012 | Added VIOS ifixes | Updated: Wed Feb 29 16:32:13 CST 2012 | Added 6.1 TL7 SP3 and 7.1 TL1 SP3 ifixes | Updated: Wed Mar 21...

AIX Gather Dump Password Hashes

Post Module to dump the password hashes for all users on an AIX System This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'AIX Gather Dump Password Hashes', 'Description' = %q Post Module to dump t...

CVE-2011-1384

The 1 bin/invscoutClientVPDSurvey and 2 sbin/invscoutlsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout operations on arbitrary files, via a symlink attack on an unspecified file...

Design/Logic Flaw

The 1 bin/invscoutClientVPDSurvey and 2 sbin/invscoutlsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout operations on arbitrary files, via a symlink attack on an unspecified file...

CVE-2011-1384

CVE-2011-1384 affects IBM Inventory Scout (invscout.rte) on AIX: the binaries bin/invscoutClient_VPD_Survey and sbin/invscout_lsvpd prior to 2.2.0.19 are exposed to a symlink attack that lets local users delete arbitrary files or cause inventory scout operations on arbitrary files. Affected platf...

CVE-2011-1384

The 1 bin/invscoutClientVPDSurvey and 2 sbin/invscoutlsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout operations on arbitrary files, via a symlink attack on an unspecified file...

CVE-2011-4834

The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management ALM 11 on AIX, HP-UX, and Solaris allows local users to gain privileges via 1 a Trojan horse /tmp/tmp.txt FIFO or 2 a symlink attack on /tmp/tmp.txt...