AIX Technology Level Out of Date

The remote AIX operating system is lagging behind its official Technology Level TL and may therefore be missing critical security patches. NOTE: Findings may be affected by an extended support contract. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

PT-2004-1397 · Ibm · Aix

Name of the Vulnerable Software and Affected Versions: AIX versions 4.3.3 through 5.1 Description: The issue allows remote attackers to guess the password via brute force methods when direct remote login is disabled. This occurs because AIX displays a different message if the password is correct...

CVE-2003-0087

Buffer overflow in libIM library libIM.a for National Language Support NLS on AIX 4.3 through 5.2 allows local users to gain privileges via several possible attack vectors, including a long -im argument to aixterm...

IBM AIX 4.3.35.15.2 - libIM Buffer Overflow

IBM AIX 4.3.35.15.2 - libIM Buffer Overflow source: https://www.securityfocus.com/bid/6840/info A buffer overflow vulnerability has been discovered in the libIM library available for the AIX 4.3, 5.1, 5.2 operating system. As a result it may be possible to overwrite sensitive memory in programs...

ypxfrd daemon fails to properly validate user supplied arguments in "getdbm" procedure

Overview A vulnerability in the ypxfrd daemon may allow a local attacker to read arbitrary files on the vulnerable system. Description Janusz Niewiadomski, of iSEC, discovered this vulnerability and produced the following advisory.Issue: ====== Improper arguments validation in ypxfrd may allow...

CVE-2001-1329

Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument...

IBM AIX 4.x - usrbinsetsenv Local Buffer Overflow

IBM AIX 4.x - usrbinsetsenv Local Buffer Overflow / source: https://www.securityfocus.com/bid/2032/info AIX is a version of the UNIX Operating System distributed by IBM. A problem exists that could allow a user elevated priviledges. The problem occurs in the setsenv binary. It has been reported...

AIX 4.2/4.3 - '/usr/lib/lpd/pio/etc/piomkapqd' Local Buffer Overflow

// source: https://www.securityfocus.com/bid/3238/info // // The 'piomkapqd' utility is a component of the AIX printing subsystem. By default, it is installed setgid and owned by the 'printk' group. // // 'piomkapqd' contains a locally exploitable stack overrun condition in it's handling of comma...

AIX 4.24.3 - usrliblpdpioetcpiomkapqd Local Buffer Overflow

AIX 4.24.3 - usrliblpdpioetcpiomkapqd Local Buffer Overflow // source: https://www.securityfocus.com/bid/3238/info // // The 'piomkapqd' utility is a component of the AIX printing subsystem. By default, it is installed setgid and owned by the 'printk' group. // // 'piomkapqd' contains a locally...

CVE-1999-1117

lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter...

PT-1998-1022 · Ibm · Aix

Name of the Vulnerable Software and Affected Versions: AIX affected versions not specified Description: The issue allows remote users to modify sensitive files. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-1997-1047 · Ibm · Aix

Name of the Vulnerable Software and Affected Versions: AIX affected versions not specified Description: The issue allows local users to obtain root access due to incorrect privilege handling in the nslookup command. Recommendations: At the moment, there is no information about a newer version tha...

PT-1997-1045 · Ibm · Aix

Name of the Vulnerable Software and Affected Versions: AIX affected versions not specified Description: The issue allows local users to obtain root access due to a buffer overflow in the writesrv command. Recommendations: At the moment, there is no information about a newer version that contains ...

PT-1997-1044 · Ibm · Aix

Name of the Vulnerable Software and Affected Versions: AIX affected versions not specified Description: A buffer overflow issue in the rcp command of AIX allows local users to gain root access. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

CVE-1999-1208

Buffer overflow in ping in AIX 4.2 and earlier allows local users to gain root privileges via a long command line argument...

PT-1997-1034 · Ibm · Aix

Name of the Vulnerable Software and Affected Versions: AIX affected versions not specified Description: A buffer overflow issue in the lquerylv program of AIX allows local users to gain root access. Recommendations: At the moment, there is no information about a newer version that contains a fix...

CVE-1999-0085

Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname...

PT-1994-1005 · Ibm · Aix

Name of the Vulnerable Software and Affected Versions: AIX affected versions not specified Description: The issue allows local and remote users to gain additional privileges when network printing is enabled. Recommendations: At the moment, there is no information about a newer version that contai...

DUO-PSA-2018-001: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2018-001 Publication Date: 2018-03-06 Revision Date: 2018-03-06 Status: Confirmed, Fixed Document Revision: 1 Overview Duo has identified and fixed an issue with our public documentation on the Duo Unix integration. The suggested Pluggable...

DUO-PSA-2018-001: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2018-001 Publication Date: 2018-03-06 Revision Date: 2018-03-06 Status: Confirmed, Fixed Document Revision: 1 Overview Duo has identified and fixed an issue with our public documentation on the Duo Unix integration. The suggested Pluggable...