Design/Logic Flaw

CSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform an "su root" action by leveraging presence on the cluster-wide password-change list...

CVE-2015-5005

CSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform an "su root" action by leveraging presence on the cluster-wide password-change list...

CVE-2015-5005

CVE-2015-5005 affects IBM PowerHA SystemMirror CSPOC on AIX 6.1 and 7.1. An authenticated remote user added to the cluster password-change list can exploit a shipped script to perform a privileged action, gaining root via an "su root" operation. The vulnerability is tied to the CSPOC feature that...

PT-2015-6749

Name of the Vulnerable Software and Affected Versions IBM PowerHA SystemMirror versions 6.1 through 7.1 on AIX Description The issue allows remote authenticated users to perform a privileged action by leveraging their presence on the cluster-wide password-change list. Recommendations For IBM...

CVE-2015-5005: Undefined Security Weakness

CSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform an "su root" action by leveraging presence on the cluster-wide password-change list...

IBM PowerHA for AIX Local Privilege Vulnerability

IBM PowerHA for AIX is a set of solutions that enable systems to cope with failures and reduce application downtime. A local elevation of privilege vulnerability exists in IBM PowerHA for AIX, which allows an attacker to exploit the vulnerability to elevate privileges and gain root privileges...

AIX 6.1 TL 0 : powerha (IV76943) (deprecated)

IBM PowerHA SystemMirror has a systems management feature CSPOC which includes an option to allow users to change their password cluster-wide. Once added to this list, a non-root user may be able to exploit a vulnerability in one of the scripts shipped with the product to switch user su to the ro...

AIX PowerHA Cluster Management Unspecified Remote Configuration Manipulation

An unspecified vulnerability in the IBM PowerHA Cluster Management monitoring of port 6177 could allow a remote attacker to make unauthorized changes the remote host's AIX configuration. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Code injection

Unspecified vulnerability in the Cluster Management component in IBM PowerHA 5.4, 5.4.1, 5.5, and 6.1 on AIX allows remote attackers to modify the operating-system configuration via packets to the godm port 6177/tcp...

CVE-2009-3900

Unspecified vulnerability in the Cluster Management component in IBM PowerHA 5.4, 5.4.1, 5.5, and 6.1 on AIX allows remote attackers to modify the operating-system configuration via packets to the godm port 6177/tcp...

CVE-2009-3900

Unspecified vulnerability in the Cluster Management component in IBM PowerHA 5.4, 5.4.1, 5.5, and 6.1 on AIX allows remote attackers to modify the operating-system configuration via packets to the godm port 6177/tcp...

CVE-2009-3900

CVE-2009-3900 affects IBM PowerHA Cluster Management on AIX (versions 5.4/5.4.1/5.5/6.1). The vulnerability allows a remote attacker to modify the operating-system configuration by sending packets to the godm port (6177/tcp). The provided connected Nessus entry confirms an unspecified remote conf...

CVE-2009-3900: Undefined Security Weakness

Unspecified vulnerability in the Cluster Management component in IBM PowerHA 5.4, 5.4.1, 5.5, and 6.1 on AIX allows remote attackers to modify the operating-system configuration via packets to the godm port 6177/tcp...