16250 matches found
AIX 6.1 TL 9 : pconsole (IV89739)
https://vulners.com/cve/CVE-2016-0266 https://vulners.com/cve/CVE-2016-0266 IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via unspecified vectors. %NASLMINLEVEL 70300 C...
Vulnerability in pConsole impacts AIX,pConsole on AIX does not support TLS 1.2.
IBM SECURITY ADVISORY First Issued: Fri Dec 2 15:01:37 CST 2016 |Updated: Mon May 1 16:30:43 CDT 2017 |Update: Bulletin updated to include ifix for AIX level 7.1.3 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/pconsoleadvisory2.asc...
AIX OpenSSH Advisory : openssh_advisory9.asc
The remote AIX host has a version of OpenSSH installed that is affected by the following vulnerabilities : - An elevation of privilege vulnerability exists in the dosetupenv function within file session.c when handling user-supplied environmental variables. A local attacker can exploit this to ga...
AIX OpenSSL Advisory : openssl_advisory21.asc (SWEET32)
The version of OpenSSL installed on the remote AIX host is affected by the following vulnerabilities : - Multiple integer overflow conditions exist in s3srvr.c, sslsess.c, and t1lib.c due to improper use of pointer arithmetic for heap-buffer boundary checks. An unauthenticated, remote attacker ca...
Vulnerabilities in BIND impact AIX,Vulnerabilities in BIND impact VIOS
IBM SECURITY ADVISORY First Issued: Fri Nov 18 08:19:36 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bindadvisory13.asc https://aix.software.ibm.com/aix/efixes/security/bindadvisory13.asc...
AIX Java Advisory : java_july2016_advisory.asc (July 2016 CPU)
The version of Java SDK installed on the remote AIX host is affected by multiple vulnerabilities in the following subcomponents : - An unspecified flaw exists in the Networking subcomponent that allows a local attacker to impact integrity. CVE-2016-3485 - An unspecified flaw exists in the...
AIX 6.1 TL 9 : bind (IV89828) (deprecated)
https://vulners.com/cve/CVE-2016-2776 https://vulners.com/cve/CVE-2016-2776 ISC BIND is vulnerable to a denial of service, caused by an assertion failure in buffer.c while a nameserver is building responses to a specifically constructed request. By sending a specially crafted DNS packet, a remote...
AIX 7.1 TL 3 : bind (IV89830) (deprecated)
https://vulners.com/cve/CVE-2016-2776 https://vulners.com/cve/CVE-2016-2776 ISC BIND is vulnerable to a denial of service, caused by an assertion failure in buffer.c while a nameserver is building responses to a specifically constructed request. By sending a specially crafted DNS packet, a remote...
AIX 7.2 TL 0 : bind (IV89831) (deprecated)
https://vulners.com/cve/CVE-2016-2776 https://vulners.com/cve/CVE-2016-2776 ISC BIND is vulnerable to a denial of service, caused by an assertion failure in buffer.c while a nameserver is building responses to a specifically constructed request. By sending a specially crafted DNS packet, a remote...
AIX 5.3 TL 12 : bind (IV90056) (deprecated)
https://vulners.com/cve/CVE-2016-2776 https://vulners.com/cve/CVE-2016-2776 ISC BIND is vulnerable to a denial of service, caused by an assertion failure in buffer.c while a nameserver is building responses to a specifically constructed request. By sending a specially crafted DNS packet, a remote...
AIX 7.1 TL 4 : bind (IV89829) (deprecated)
https://vulners.com/cve/CVE-2016-2776 https://vulners.com/cve/CVE-2016-2776 ISC BIND is vulnerable to a denial of service, caused by an assertion failure in buffer.c while a nameserver is building responses to a specifically constructed request. By sending a specially crafted DNS packet, a remote...
Vulnerabilities in OpenSSL affect AIX
IBM SECURITY ADVISORY First Issued: Mon Nov 14 13:29:26 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory21.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory21.asc...
AIX 6.1 / 7.1.2 / 7.1.3 : IBM PowerHA SystemMirror CSPOC Privilege Escalation
The remote AIX host is running a version of IBM PowerHA SystemMirror that is missing a security patch. It is, therefore, affected by a privilege escalation vulnerability in the Cluster Single Point of Control CSPOC feature that occurs when adding an authenticated, remote user to the list that...
Vulnerability in lquerylv in LVM impacts AIX,Vulnerability in lquerylv in LVM impacts VIOS
IBM SECURITY ADVISORY First Issued: Mon Nov 7 10:35:13 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/lquerylvadvisory.asc https://aix.software.ibm.com/aix/efixes/security/lquerylvadvisory.asc...
IBM AIX lquerylv Local Privilege Vulnerability
IBM AIX Advanced Interactive eXecutive is a UNIX operating system developed by IBM. A local privilege exploit exists in the lquerylv program in several versions of IBM AIX, which can be exploited by an attacker to execute arbitrary code and gain administrator privileges...
AIX 5.3 / 6.1 / 7.1 / 7.2 lquerylv Local Root
!/usr/bin/sh AIX lquerylv 5.3, 6.1, 7.1, 7.2 local root exploit. Tested against latest patchset 7100-04 This exploit takes advantage of known issues with debugging functions within the AIX linker library. We are taking advantage of known functionality, and focusing on badly coded SUID binaries...
IBM AIX 5.36.17.17.2 - lquerylv Local Privilege Escalation
IBM AIX 5.36.17.17.2 - lquerylv Local Privilege Escalation !/usr/bin/sh AIX lquerylv 5.3, 6.1, 7.1, 7.2 local root exploit. Tested against latest patchset 7100-04 This exploit takes advantage of known issues with debugging functions within the AIX linker library. We are taking advantage of known...
IBM AIX 6.1/7.1/7.2.0.2 - 'lsmcode' Local Privilege Escalation
!/usr/bin/sh AIX lsmcode local root exploit. Affected: AIX 6.1/7.1/7.2.0.2 Blog post URL: https://rhinosecuritylabs.com/2016/11/03/unix-nostalgia-hunting-zeroday-vulnerabilities-ibm-aix/ lqueryroot.sh by @hxmonsegur 2016 //RSL ROOTSHELL=/tmp/shell-$od -N4 -tu /dev/random | awk 'NR==1 print $2 ' i...
IBM AIX 5.3/6.1/7.1/7.2 - 'lquerylv' Privilege Escalation Exploit
Exploit for linux platform in category local exploits !/usr/bin/sh AIX lquerylv 5.3, 6.1, 7.1, 7.2 local root exploit. Tested against latest patchset 7100-04 This exploit takes advantage of known issues with debugging functions within the AIX linker library. We are taking advantage of known...
IBM AIX 5.3/6.1/7.1/7.2 - 'lquerylv' Local Privilege Escalation
!/usr/bin/sh AIX lquerylv 5.3, 6.1, 7.1, 7.2 local root exploit. Tested against latest patchset 7100-04 This exploit takes advantage of known issues with debugging functions within the AIX linker library. We are taking advantage of known functionality, and focusing on badly coded SUID binaries...