AIX 6.1 TL 9 : lvm (IV68099) (deprecated)

The running of lquerylv command with variable DBGCMDLQUERYLV set may allow a local user to gain root privileges. This plugin is deprecated and has been replaced by plugin 81108. %NASLMINLEVEL 999999 C Tenable Network Security, Inc. @DEPRECATED@ The text in the description was extracted from AIX...

AIX 5.3 TL 12 : bind9 (IV62327)

The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service traffic amplification via DNS queries with...

IBM AIX <= 4.2 lchangelv Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/389/info A buffer overflow can occur in lchangelv under some versions of AIX. Note that an attacker must already have the GID or EGID of 'system' to execute lchangelv. Because lchangelv is SUID root, this overflow will...

AIX 7.1 TL 2 : malloc (IV61314)

It has been identified that the runtime linker allows privilege escalation via arbitrary file writes with elevated privileges programs. When MALLOCOPTIONS and MALLOCBUCKETS environment variables are set with bucket statistics options and by executing certain setuid programs, a non-privileged user...

AIX 7.1 TL 2 : ptrace (IV58861)

IBM AIX is vulnerable to a denial of service, caused by an error in the ptrace function. A local attacker could exploit this vulnerability to cause a system crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory...

AIX 6.1 TL 9 : ptrace (IV59615)

IBM AIX is vulnerable to a denial of service, caused by an error in the ptrace function. A local attacker could exploit this vulnerability to cause a system crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory...

AIX OpenSSH Vulnerability : openssh_advisory3.asc

The mmnewkeysfromblob function in monitorwrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES-GCM cipher is used, does not properly initialize memory for a MAC context data structure, which allows remote authenticated users to bypass intended ForceCommand and login-shell restrictions via packet dat...

AIX 7.1 TL 2 : cmdque (IV47430)

Printer commands mkque and mkquedev are susceptible to buffer overflow by users belonging to the 'printq' group. These commands are owned by 'root' and SUID bit set. The group is set to 'printq'. By default, no users are belong to the 'printq'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

AIX 6.1 TL 7 : cmdque (IV47427)

Printer commands mkque and mkquedev are susceptible to buffer overflow by users belonging to the 'printq' group. These commands are owned by 'root' and SUID bit set. The group is set to 'printq'. By default, no users are belong to the 'printq'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

AIX 7.1 TL 2 : inet (IV42095)

If an AIX machine has IPv6 address configured, and if a malformed IPv6 packet in a specific format is sent to that machine, the machine can hang while processing that packet. The problem can happen only if an IPv6 address is configured on any of the network interfaces. %NASLMINLEVEL 70300 C Tenab...

AIX 5.3 TL 7 : bos.acct (U817702)

The remote host is missing AIX PTF U817702, which is related to the security of the package bos.acct. The iostat command contains an environment variable handling error. A local attacker may exploit this error to execute arbitrary code with root privileges because the command is setuid root. The...

AIX 6.1 TL 6 : bos.rte.odm (U850143)

The remote host is missing AIX PTF U850143, which is related to the security of the package bos.rte.odm. AIX could allow a arbitrary file overwrite symlink vulnerability due to libodm.a bug. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

AIX 6.1 TL 2 : devices.pci.14106902.rte (U815712)

The remote host is missing AIX PTF U815712, which is related to the security of the package devices.pci.14106902.rte. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U815712. The text itself is...

AIX 6.1 TL 5 : devices.pciex.771000801410b003.rte (U823590)

The remote host is missing AIX PTF U823590, which is related to the security of the package devices.pciex.771000801410b003.rte. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U823590. The text itself...

AIX 5.3 TL 8 : bos.net.tcp.client (U817372)

The remote host is missing AIX PTF U817372, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U817372. The text itself is copyright C...

AIX 6.1 TL 6 : X11.Dt.ToolTalk (U831541)

The remote host is missing AIX PTF U831541, which is related to the security of the package X11.Dt.ToolTalk. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U831541. The text itself is copyright C...

AIX 5.3 TL 5 : perl (IZ10244)

A buffer overflow vulnerability exists in the 'perl.rte' fileset. A remote attacker may execute arbitrary code if a Perl script executing on the system is listening on a network port. If exploited the attacker can execute arbitrary code with the same privileges as the script. For more details...

AIX 5.3 TL 0 : libtt (IZ52843)

There is a buffer overflow vulnerability in the ToolTalk library libtt.a. A remote attacker can exploit this vulnerability when the rpc.ttdbserver is enabled in /etc/inetd.conf. The successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code as the root user...

AIX 6.1 TL 2 : cmsd (IZ62571)

There is a buffer overflow vulnerability in the calendar daemon library libcsa.a. A remote attacker can exploit this vulnerability when the rpc.cmsd calendar daemon is enabled in /etc/inetd.conf. The successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code ...

AIX 5.3 TL 0 : nddstat (IZ17059)

The nddstat family of commands contains an environment variable handling error. A local attacker may exploit this error to execute arbitrary code with root privileges because the commands are setuid root. The following files are vulnerable : /usr/sbin/atmstat /usr/sbin/entstat /usr/sbin/fddistat...