Format string

Format string vulnerability in the msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.3109 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IRIX 6.5 allows remote attackers to execute arbitrary code via an RPC request...

CVE-2010-1039

CVE-2010-1039 describes a remote code execution risk due to an integer overflow in rpc.pcnfsd (PC-NFS daemon) across multiple OSes: IBM AIX 6.1/5.3 and earlier; VIOS 2.1/1.5 and earlier; HP-UX B.11.11/11.23/11.31; SGI IRIX 6.5. The flaw is triggered by parsing crafted RPC requests containing form...

CVE-2010-1039

Format string vulnerability in the msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.3109 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IRIX 6.5 allows remote attackers to execute arbitrary code via an RPC request...

CVE-2010-1039: Use of Externally-Controlled Format String

Format string vulnerability in the msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.3109 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IRIX 6.5 allows remote attackers to execute arbitrary code via an RPC request...

Vulnerability in Diffie-Hellman ciphers affects sendmail on VIOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Mon Mar 29 15:54:57 CDT 2010 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/sendmailadvisory.asc VULNERABILITY SUMMARY VULNERABILITY: AIX sendmail SSL...

CVE-2010-0960

Buffer overflow in qosmod in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors...

CVE-2010-0961

Buffer overflow in qoslist in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors...

Buffer overflow

Buffer overflow in qosmod in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors...

Buffer overflow

Buffer overflow in qoslist in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors...

CVE-2010-0961

Buffer overflow in qoslist in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors...

CVE-2010-0960

AIX 6.1 and VIOS 2.1 are affected by CVE-2010-0960 due to a buffer overflow in qosmod (bos.net.tcp.server). A locally authenticated attacker can exploit this vulnerability to gain privileges, with the vulnerable program being /usr/sbin/qosmod. The public documents describe the vulnerability as a ...

CVE-2010-0961

The CVE-2010-0961 vulnerability affects IBM AIX 6.1 and VIOS 2.1, specifically the qoslist component in bos.net.tcp.server. It is a local privilege-escalation issue caused by a buffer overflow in qoslist, enabling a locally authenticated user to gain higher privileges. Affected executables includ...

CVE-2010-0960: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in qosmod in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors...

CVE-2010-0961: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in qoslist in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors...

CVE-2009-3699

Stack-based buffer overflow in libcsa.a aka the calendar daemon library in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd...

CVE-2009-3699

CVE-2009-3699 – AIX rpc.cmsd opcode 21 buffer overflow AIX libcsa.a (calendar daemon library) is vulnerable to a stack-based buffer overflow when handling opcode 21 parameters in rpc.cmsd. Affected products include IBM AIX 5.x up to 5.3.10 and 6.x up to 6.1.3, and VIOS 2.1 and earlier. The flaw a...

CVE-2009-3699

Stack-based buffer overflow in libcsa.a aka the calendar daemon library in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd...

IBM AIX 'rpc.cmsd'日历守护进程远程栈缓冲区溢出漏洞

Bugraq ID: 36615 IBM AIX是一款商业性质的操作系统。 IBM AIX rpc.cmsd存在缓冲区溢出问题，远程攻击者可以利用漏洞以root进程权限执行任意指令。 处理远程过程21的请求时存在漏洞，此函数接收两个参数，都为XDR字符串，当拷贝第一个参数到基于栈的缓冲区时，代码没有正确校验它的长度，可触发基于栈的缓冲区溢出。要利用此漏洞，攻击者需要通过RCP连接目标主机，不需要验证通过。 IBM Virtual I/O Server VIOS 2.1 IBM Virtual I/O Server VIOS 1.5.2 IBM Virtual I/O Server VIO...

iDefense Security Advisory 10.07.09: IBM AIX rpc.cmsd Stack Buffer Overflow Vulnerability

iDefense Security Advisory 10.07.09 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 07, 2009 I. BACKGROUND IBM's AIX is a Unix operating system based on System V, which runs on the PowerPC PPC architecture. For more information, visit the product web site at the following URL...

CVE-2009-1806: Undefined Security Weakness

Unspecified vulnerability in IBM Hardware Management Console HMC 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server VIOS partitions. NOTE: some of...