16249 matches found
CVE-2016-6079
CVE-2016-6079 affects IBM AIX 5.3, 6.1, 7.1 and 7.2 (and VIOS), with a local privilege escalation in the lquerylv component that could grant root privileges to a locally authenticated user. Root cause details are not fully disclosed in the initial description, but IBM AIX Security Advisory lquery...
CVE-2016-6079
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. IBM APARs: IV88658, IV87981, IV88419, IV87640, IV88053...
CVE-2016-8944
CVE-2016-8944 affects IBM AIX 7.1 and 7.2 where a local user can open a file with a crafted argument causing the system to crash (local DoS). The issue is tied to the sysproc component and is addressed by APARs IV91488, IV91487, IV91456, and IV90234, with vulnerable filesets including bos.mp64 on...
CVE-2016-8972
CVE-2016-8972 affects IBM AIX 6.1, 7.1 and 7.2 via the bellmail client, enabling a local user to gain root privileges through a specially crafted command. Root access hinges on insecure permissions around bellmail; APARs IV91006–IV91011 exist. AIX advisories (bellmail_advisory.asc) and exploit re...
AIX 7.2 TL 0 : ntp (IV92192) (deprecated)
NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2016-7427 NTP is vulnerable to a denial of service, caused by an error in broadcast mode replay prevention functionality. By sending specially crafted NTP packets, a local attacker could exploit this vulnerability to cause a denial o...
AIX 6.1 TL 9 : ntp (IV91803) (deprecated)
NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2016-7427 NTP is vulnerable to a denial of service, caused by an error in broadcast mode replay prevention functionality. By sending specially crafted NTP packets, a local attacker could exploit this vulnerability to cause a denial o...
AIX 7.1 TL 4 : ntp (IV91951) (deprecated)
NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2016-7427 NTP is vulnerable to a denial of service, caused by an error in broadcast mode replay prevention functionality. By sending specially crafted NTP packets, a local attacker could exploit this vulnerability to cause a denial o...
There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.
IBM SECURITY ADVISORY First Issued: Mon Feb 13 15:32:47 CST 2017 |Updated: Mon Oct 2 10:47:12 CDT 2017 |Update 2: Removed bos.net.tcp.ntp from the impacted fileset list for | AIX 7200-01-02. Fileset bos.net.tcp.ntpd is still listed as impacted | for AIX 7200-01-02. The most recent version of this...
IBM AIX Local Elevation of Privilege Vulnerability (CNVD-2017-01334)
IBM AIX Advanced Interactive eXecutive is a UNIX operating system developed by IBM. A local elevation of privilege vulnerability exists in bellmail in IBM AIX versions 6.1, 7.1, and 7.2. A local attacker can exploit this vulnerability to gain root privileges...
AIX Java Advisory : java_oct2016_advisory.asc (October 2016 CPU)
The version of Java SDK installed on the remote AIX host is affected by multiple vulnerabilities in the following subcomponents : - An unspecified flaw exists in the Libraries subcomponent that allows an unauthenticated, remote attacker to impact integrity. CVE-2016-5542 - An unspecified flaw...
Vulnerabilities in OpenSSH affect AIX.
IBM SECURITY ADVISORY First Issued:Sun Feb 5 23:36:10 CST 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory10.asc https://aix.software.ibm.com/aix/efixes/security/opensshadvisory10.asc...
Code injection
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges...
CVE-2017-1093
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges...
CVE-2017-1093
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges...
CVE-2017-1093
The CVE-2017-1093 issue affects IBM AIX 6.1, 7.1, and 7.2 where a local attacker could exploit a vulnerability in the bellmail binary to gain root privileges. Connected sources corroborate a local-privilege-escalation in bellmail and tie affected TLs/versions to AIX. The Nessus advisories link th...
CVE-2017-1093
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges...
CVE-2016-5985
The IBM Tivoli Storage Manager IBM Spectrum Protect AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash...
CVE-2016-5985
The IBM Tivoli Storage Manager IBM Spectrum Protect AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash...
Buffer overflow
The IBM Tivoli Storage Manager IBM Spectrum Protect AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash...