AIX 7.1 TL 2 : malloc (IV61314)

It has been identified that the runtime linker allows privilege escalation via arbitrary file writes with elevated privileges programs. When MALLOCOPTIONS and MALLOCBUCKETS environment variables are set with bucket statistics options and by executing certain setuid programs, a non-privileged user...

AIX 7.1 TL 2 : inet (IV42095)

If an AIX machine has IPv6 address configured, and if a malformed IPv6 packet in a specific format is sent to that machine, the machine can hang while processing that packet. The problem can happen only if an IPv6 address is configured on any of the network interfaces. %NASLMINLEVEL 70300 C Tenab...

AIX 6.1 TL 2 : devices.pci.14106902.rte (U815712)

The remote host is missing AIX PTF U815712, which is related to the security of the package devices.pci.14106902.rte. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U815712. The text itself is...

AIX 5.3 TL 8 : bos.net.tcp.client (U817372)

The remote host is missing AIX PTF U817372, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U817372. The text itself is copyright C...

AIX 6.1 TL 5 : devices.pciex.771000801410b003.rte (U823590)

The remote host is missing AIX PTF U823590, which is related to the security of the package devices.pciex.771000801410b003.rte. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U823590. The text itself...

AIX 6.1 TL 6 : X11.Dt.ToolTalk (U831541)

The remote host is missing AIX PTF U831541, which is related to the security of the package X11.Dt.ToolTalk. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U831541. The text itself is copyright C...

AIX 6.1 TL 6 : bos.rte.odm (U850143)

The remote host is missing AIX PTF U850143, which is related to the security of the package bos.rte.odm. AIX could allow a arbitrary file overwrite symlink vulnerability due to libodm.a bug. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

AIX 5.3 TL 7 : bos.acct (U817702)

The remote host is missing AIX PTF U817702, which is related to the security of the package bos.acct. The iostat command contains an environment variable handling error. A local attacker may exploit this error to execute arbitrary code with root privileges because the command is setuid root. The...

AIX 5.3 TL 5 : perl (IZ10244)

A buffer overflow vulnerability exists in the 'perl.rte' fileset. A remote attacker may execute arbitrary code if a Perl script executing on the system is listening on a network port. If exploited the attacker can execute arbitrary code with the same privileges as the script. For more details...

AIX 5.3 TL 9 : libtt (IZ52846)

There is a buffer overflow vulnerability in the ToolTalk library libtt.a. A remote attacker can exploit this vulnerability when the rpc.ttdbserver is enabled in /etc/inetd.conf. The successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code as the root user...

AIX 5.3 TL 8 : libtt (IZ52845)

There is a buffer overflow vulnerability in the ToolTalk library libtt.a. A remote attacker can exploit this vulnerability when the rpc.ttdbserver is enabled in /etc/inetd.conf. The successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code as the root user...

AIX 5.3 TL 0 : libtt (IZ52843)

There is a buffer overflow vulnerability in the ToolTalk library libtt.a. A remote attacker can exploit this vulnerability when the rpc.ttdbserver is enabled in /etc/inetd.conf. The successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code as the root user...

AIX 7.1 TL 1 : wpar (IV08320)

Some WPAR specific system calls may cause undefined behavior, possibly resulting in a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory wparadvisory.asc. include'deprecatednasllevel.inc'; include'compat.inc...

AIX 6.1 TL 1 : swcons (IZ28943)

A file permission/ownership vulnerability exists in the 'bos.rte.console' fileset command listed below whereby a local attacker may create arbitrary contents within a file owned by root using the 'swcons' command. The local attacker must be a member of the 'system' group gid=0 to execute this...

AIX 5.3 TL 0 : at (IZ43453)

The at command does not drop permissions when reading certain files. A local attacker may exploit this error to read any file on the system because the command is setuid root. The following file is vulnerable : /usr/bin/at. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the...

AIX 5.2 TL 0 : errpt (IZ19905)

The errpt command contains a buffer which can overflow. A local attacker may exploit this overflow to execute arbitrary code with root privileges because the command is setuid root. The following files are vulnerable : /usr/bin/errpt. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text ...

AIX 7.1 TL 1 : syscall (IV22697)

A kernel extension call is exported to user space without proper sanity checks causing a system crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory syscalladvisory.asc. include'deprecatednasllevel.inc';...

AIX 5.3 TL 7 : swcons (IZ18338)

A file permission/ownership vulnerability exists in the 'bos.rte.console' fileset command listed below whereby a local attacker may create arbitrary contents within a file owned by root using the 'swcons' command. The local attacker must be a member of the 'system' group gid=0 to execute this...

AIX 5.3 TL 8 : iostat (IZ21506)

The iostat command contains an environment variable handling error. A local attacker may exploit this error to execute arbitrary code with root privileges because the command is setuid root. The following files are vulnerable : /usr/bin/iostat. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

AIX 5.2 TL 0 : at (IZ43452)

The at command does not drop permissions when reading certain files. A local attacker may exploit this error to read any file on the system because the command is setuid root. The following file is vulnerable : /usr/bin/at. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the...