AIX 7.1 TL 1 : infiniband (IV43756)

Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory infinibandadvisory.asc...

AIX 6.1 TL 8 : inet (IV42124)

If an AIX machine has IPv6 address configured, and if a malformed IPv6 packet in a specific format is sent to that machine, the machine can hang while processing that packet. The problem can happen only if an IPv6 address is configured on any of the network interfaces. %NASLMINLEVEL 70300 C Tenab...

AIX 7.1 TL 0 : inet (IV42264)

If an AIX machine has IPv6 address configured, and if a malformed IPv6 packet in a specific format is sent to that machine, the machine can hang while processing that packet. The problem can happen only if an IPv6 address is configured on any of the network interfaces. %NASLMINLEVEL 70300 C Tenab...

IBM Notes runs arbitrary JAVA and Javascript in emails

Overview IBM Notes parses arbitrary JAVA and Javascript code by default when viewing emails. Description The n.runs AG security advisory states:Notes 8.5.3 does not filter tags inside HTML emails. This can be used to load arbitrary Java applets from remote sources making it an information...

Novell ZENworks Control Center File Upload Remote Code Execution

The installed version of Novell ZENworks Control Center has a flaw with authentication checking on '/zenworks/jsp/index.jsp' that can allow a remote, unauthenticated attacker to upload arbitrary files and execute them with SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; i...

AIX 7.1 TL 2 : ftp (IV30669)

The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp. %NASLMINLEVEL 70300 C Tenable Network...

AIX 6.1 TL 3 : qoslist (IZ71554)

There is a buffer overflow vulnerability in the qoslist command. A locally authenticated attacker can exploit this vulnerability if they have they have been assigned the aix.network.status or aix.network.config.no role-based access control authorizations. The successful exploitation of this...

AIX 6.1 TL 2 : qosmod (IZ71627)

There is a buffer overflow vulnerability in the qosmod command. A locally authenticated attacker can exploit this vulnerability if they have they have been assigned the aix.network.config.no role-based access control authorization. The successful exploitation of this vulnerability allows a local...

AIX 5.2 TL 0 : libtt (IZ52842)

There is a buffer overflow vulnerability in the ToolTalk library libtt.a. A remote attacker can exploit this vulnerability when the rpc.ttdbserver is enabled in /etc/inetd.conf. The successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code as the root user...

AIX 5.3 TL 0 : nddstat (IZ17059)

The nddstat family of commands contains an environment variable handling error. A local attacker may exploit this error to execute arbitrary code with root privileges because the commands are setuid root. The following files are vulnerable : /usr/sbin/atmstat /usr/sbin/entstat /usr/sbin/fddistat...

AIX 6.1 TL 4 : qoslist (IZ68194)

There is a buffer overflow vulnerability in the qoslist command. A locally authenticated attacker can exploit this vulnerability if they have they have been assigned the aix.network.status or aix.network.config.no role-based access control authorizations. The successful exploitation of this...

AIX 6.1 TL 1 : qosmod (IZ71870)

There is a buffer overflow vulnerability in the qosmod command. A locally authenticated attacker can exploit this vulnerability if they have they have been assigned the aix.network.config.no role-based access control authorization. The successful exploitation of this vulnerability allows a local...

AIX 5.3 TL 7 : libc (IZ50517)

There is a race condition in the MALLOCDEBUG debugging component of the malloc subsystem in the library libc.a. A local user can exploit this race condition when executing setuid root programs and thereby overwrite any file in the system. The successful exploitation of this vulnerability allows a...

AIX 6.1 TL 1 : libtt (IZ52849)

There is a buffer overflow vulnerability in the ToolTalk library libtt.a. A remote attacker can exploit this vulnerability when the rpc.ttdbserver is enabled in /etc/inetd.conf. The successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code as the root user...

AIX 6.1 TL 2 : libtt (IZ52850)

There is a buffer overflow vulnerability in the ToolTalk library libtt.a. A remote attacker can exploit this vulnerability when the rpc.ttdbserver is enabled in /etc/inetd.conf. The successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code as the root user...

AIX 7.1 TL 0 : bind9 (IV22556)

Adding records to BIND with zero length rdata fields could result in memory disclosure to client, data corruption or system crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory bind9advisory4.asc...

AIX 5.3 TL 0 : ps (IZ12745)

An information leak exists in the 'bos.rte.control' fileset commands listed below. A local attacker may access sensitive information for arbitrary processes. The following commands are vulnerable : /usr/bin/ps. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was...

AIX 5.3 TL 0 : errpt (IZ22346)

The errpt command contains a buffer which can overflow. A local attacker may exploit this overflow to execute arbitrary code with root privileges because the command is setuid root. The following files are vulnerable : /usr/bin/errpt. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text ...

AIX 6.1 TL 1 : swcons (IZ28943)

A file permission/ownership vulnerability exists in the 'bos.rte.console' fileset command listed below whereby a local attacker may create arbitrary contents within a file owned by root using the 'swcons' command. The local attacker must be a member of the 'system' group gid=0 to execute this...

AIX 6.1 TL 8 : fuser (IV29289)

IBM AIX is vulnerable to a denial of service, caused by improper restrictions on the fuser command. A local attacker could exploit this vulnerability via the -k argument to kill a process of another user. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extract...