AIX Java Advisory : java_oct2015_advisory.asc (October 2015 CPU)

The version of Java SDK installed on the remote AIX host is affected by multiple vulnerabilities in the following components : - 2D - CORBA - Deployment - JAXP - JGSS - Libraries - RMI - Security - Serialization %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'...

Multiple vulnerabilities in IBM Java SDK affect AIX

IBM SECURITY ADVISORY First Issued: Thu Dec 10 08:51:54 CST 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javaoct2015advisory.asc https://aix.software.ibm.com/aix/efixes/security/javaoct2015advisory.asc...

AIX 6.1 TL 9 : bos.net.tcp.server (U863668) (Bar Mitzvah)

The remote host is missing AIX PTF U863668, which is related to the security of the package bos.net.tcp.server. Product could allow a remote attacker to obtain sensitive information, caused by a design error when using the SSLv3 protocol. A remote user with the ability to conduct a...

AIX 6.1 TL 9 : bos.net.tcp.client (U861500)

The remote host is missing AIX PTF U861500, which is related to the security of the package bos.net.tcp.client. Product could allow a remote attacker to obtain sensitive information, caused by a design error when using the SSLv3 protocol. A remote user with the ability to conduct a...

IBM PowerHA SystemMirror on AIX超级用户权限提升漏洞

No description provided by source...

IBM PowerHA SystemMirror on AIX Superuser Elevation of Privilege Vulnerability

IBM PowerHA SystemMirror is a cluster solution from IBM USA. The solution supports cluster migration, failover and disaster recovery. A superuser elevation of privilege vulnerability exists in IBM PowerHA SystemMirror on AIX versions 6.1 and 7.1, which allows an authenticated remote user to perfo...

CVE-2015-5005

CSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform an "su root" action by leveraging presence on the cluster-wide password-change list...

CVE-2015-5005

CSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform an "su root" action by leveraging presence on the cluster-wide password-change list...

Design/Logic Flaw

CSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform an "su root" action by leveraging presence on the cluster-wide password-change list...

CVE-2015-5005

CSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform an "su root" action by leveraging presence on the cluster-wide password-change list...

CVE-2015-5005

CVE-2015-5005 affects IBM PowerHA SystemMirror CSPOC on AIX 6.1 and 7.1. An authenticated remote user added to the cluster password-change list can exploit a shipped script to perform a privileged action, gaining root via an "su root" operation. The vulnerability is tied to the CSPOC feature that...

AIX 6.1 TL 8 : bind (IV78096)

ISC BIND is vulnerable to a denial of service, caused by the exit of a validating resolver due to an assertion failure in buffer.c. By parsing a malformed DNSSEC key, a remote attacker could exploit this vulnerability to cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security,...

AIX 5.3 TL 12 : bind (IV78092)

ISC BIND is vulnerable to a denial of service, caused by the exit of a validating resolver due to an assertion failure in buffer.c. By parsing a malformed DNSSEC key, a remote attacker could exploit this vulnerability to cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security,...

AIX 7.1 TL 3 : bind (IV78095)

ISC BIND is vulnerable to a denial of service, caused by the exit of a validating resolver due to an assertion failure in buffer.c. By parsing a malformed DNSSEC key, a remote attacker could exploit this vulnerability to cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security,...

AIX 6.1 TL 9 : bind (IV78091)

ISC BIND is vulnerable to a denial of service, caused by the exit of a validating resolver due to an assertion failure in buffer.c. By parsing a malformed DNSSEC key, a remote attacker could exploit this vulnerability to cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security,...

AIX 7.1 TL 2 : bind (IV78094)

ISC BIND is vulnerable to a denial of service, caused by the exit of a validating resolver due to an assertion failure in buffer.c. By parsing a malformed DNSSEC key, a remote attacker could exploit this vulnerability to cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security,...

Design/Logic Flaw

The Reporting and Monitoring component in Tivoli Monitoring in IBM Tivoli Storage Manager 6.3 before 6.3.6 and 7.1 before 7.1.3 on Linux and AIX uses world-writable permissions for unspecified files, which allows local users to gain privileges by writing to a file...

CVE-2015-4927

The Reporting and Monitoring component in Tivoli Monitoring in IBM Tivoli Storage Manager 6.3 before 6.3.6 and 7.1 before 7.1.3 on Linux and AIX uses world-writable permissions for unspecified files, which allows local users to gain privileges by writing to a file...

CVE-2015-4927

IBM Tivoli Storage Manager’s Tivoli Monitoring Reporting and Monitoring component is affected in versions 6.3 prior to 6.3.6 and 7.1 prior to 7.1.3 on Linux and AIX. The issue is world-writable permissions on unspecified files, enabling local users to gain privileges by writing to a file. IBM’s s...

Vulnerability in BIND affects AIX,Vulnerability in BIND affects VIOS

IBM SECURITY ADVISORY First Issued: Tues Nov 3 09:00:00 CDT 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bindadvisory9.asc https://aix.software.ibm.com/aix/efixes/security/bindadvisory9.asc...