CVE-2016-0281

The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumboframes feature is not enabled, allows remote attackers to cause a denial of service FC1763 or FC5899 adapter crash via crafted packets...

IBM AIX Information Disclosure Vulnerability

IBM AIX Advanced Interactive eXecutive is a UNIX operating system developed by IBM. A remote information disclosure vulnerability exists in IBM AIX. A remote attacker could exploit this vulnerability to obtain sensitive information...

AIX 5.3 TL 12 : mustendd (IV84184)

https://vulners.com/cve/CVE-2016-0281 IBM AIX Adapter FC5899 / FC1763 with 'jumboframes' disabled could allow a remote attacker to send specially crafted packets that would crash the adapter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX...

AIX 7.1 TL 3 : mustendd (IV82421)

https://vulners.com/cve/CVE-2016-0281 IBM AIX Adapter FC5899 / FC1763 with 'jumboframes' disabled could allow a remote attacker to send specially crafted packets that would crash the adapter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX...

AIX 7.2 TL 0 : mustendd (IV81357)

https://vulners.com/cve/CVE-2016-0281 IBM AIX Adapter FC5899 / FC1763 with 'jumboframes' disabled could allow a remote attacker to send specially crafted packets that would crash the adapter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX...

AIX 7.1 TL 4 : mustendd (IV81459)

https://vulners.com/cve/CVE-2016-0281 IBM AIX Adapter FC5899 / FC1763 with 'jumboframes' disabled could allow a remote attacker to send specially crafted packets that would crash the adapter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX...

AIX 6.1 TL 9 : mustendd (IV80569)

https://vulners.com/cve/CVE-2016-0281 IBM AIX Adapter FC5899 / FC1763 with 'jumboframes' disabled could allow a remote attacker to send specially crafted packets that would crash the adapter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX...

Vulnerability in mustendd device driver impacts AIX,Vulnerability in mustendd device driver impacts VIOS

IBM SECURITY ADVISORY First Issued: Thu Jul 28 13:55:43 CDT 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/mustenddadvisory.asc https://aix.software.ibm.com/aix/efixes/security/mustenddadvisory.asc...

AIX 7.1 TL 4 : nettcp (IV86118) (SLOTH)

https://vulners.com/cve/CVE-2015-7575 The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle...

AIX 7.2 TL 0 : nettcp (IV86119) (SLOTH)

https://vulners.com/cve/CVE-2015-7575 The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle...

AIX 7.1 TL 3 : nettcp (IV86117) (SLOTH)

https://vulners.com/cve/CVE-2015-7575 The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle...

AIX 7.2 TL 0 : nettcp (IV86132) (SLOTH)

https://vulners.com/cve/CVE-2015-7575 The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle...

AIX 6.1 TL 9 : nettcp (IV86116) (SLOTH)

https://vulners.com/cve/CVE-2015-7575 The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle...

AIX 5.3 TL 12 : nettcp (IV86120) (SLOTH)

https://vulners.com/cve/CVE-2015-7575 The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle...

Vulnerabilities in MD5 Signature and Hash Algorithm and TLS 1.2 affects sendmail imap and pop3d on AIX,Vulnerabilities in MD5 Signature and Hash Algorithm and TLS 1.2 affects sendmail imap and pop3d on AIX,Vulnerabilities in MD5 Signature and Hash Algorithm and TLS 1.2 affects sendmail imap and pop3d on VIOS,Vulnerabilities in MD5 Signature and Hash Algorithm and TLS 1.2 affects sendmail imap pop3d ftp/ftpd and ndpd-host/ndpd-router on AIX

nettcpadvisory2.asc: Version 4 Version 4 Issued: Thu Oct 20 10:56:28 CDT 2016 Version 4 Changes: New iFixes provided for AIX 5.3.12.9, 6.1.9.5, 6.1.9.6, 7.1.3.5, and 7.1.3.6. For security reasons, it is highly recommended to install these new iFixes. Bulletin scope increased to include ftp/ftpd a...

AIX NTP v3 Advisory : ntp_advisory6.asc (IV83984) (IV83993) (IV83994) (IV83995) (IV84269)

The version of NTP installed on the remote AIX host is affected by the following vulnerabilities : - A flaw exists in the receive function due to the use of authenticated broadcast mode. A man-in-the-middle attacker can exploit this to conduct a replay attack. CVE-2015-7973 - A NULL pointer...

AIX NTP v4 Advisory : ntp_advisory6.asc (IV83983) (IV83992)

The version of NTP installed on the remote AIX host is affected by the following vulnerabilities : - A flaw exists in the receive function due to the use of authenticated broadcast mode. A man-in-the-middle attacker can exploit this to conduct a replay attack. CVE-2015-7973 - A NULL pointer...

AIX OpenSSL Advisory : openssl_advisory20.asc

The version of OpenSSL installed on the remote AIX host is affected by the following vulnerabilities : - A heap buffer overflow condition exists in the EVPEncodeUpdate function within file crypto/evp/encode.c that is triggered when handling a large amount of input data. An unauthenticated, remote...

Vulnerabilities in OpenSSL affect AIX

IBM SECURITY ADVISORY First Issued: Tue Jul 12 14:14:43 CDT 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory20.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory20.asc...

AIX 7.1 TL 4 : bind (IV84947) (deprecated)

https://vulners.com/cve/CVE-2016-1285 ISC BIND is vulnerable to a denial of service, caused by the improper handling of control channel input. By sending a specially crafted packet, a remote attacker could exploit this vulnerability to trigger an assertion failure in sexpr.c or alist.c and cause...