AIX 7.1 TL 1 : ntp (IV56575)

The monlist feature in ntpd in NTP allows remote attackers to cause a denial of service traffic amplification via forged 1 REQMONGETLIST or 2 REQMONGETLIST1 requests. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory...

CVE-2014-3977 - Privilege Escalation in IBM AIX

Vulnerability title: Privilege Escalation in IBM AIX CVE: CVE-2014-3977 Vendor: IBM Product: AIX Affected version: 6.1.8 and later Fixed version: N/A Reported by: Tim Brown Details: It has been identified that libodm allows privilege escalation via arbitrary file writes with elevated privileges...

IBM AIX privilege escalation

libodm insecure files creation...

AIX OpenSSL Advisory : openssl_advisory9.doc

The version of OpenSSL installed on the remote host is potentially affected by the following remote code execution and denial of service vulnerabilities : - OpenSSL could allow an attacker to cause a buffer overrun situation when an attacker sends invalid DTLS fragments to an OpenSSL DTLS client ...

IBM AIX 6.1.8 libodm - Arbitrary File Write

Exploit for aix platform in category local exploits Vulnerability title: Privilege Escalation in IBM AIX CVE: CVE-2014-3977 Vendor: IBM Product: AIX Affected version: 6.1.8 and later Fixed version: N/A Reported by: Tim Brown Details: It has been identified that libodm allows privilege escalation...

Network Time Protocol (NTP) vulnerability in AIX,Network Time Protocol (NTP) vulnerability in VIOS

IBM SECURITY ADVISORY First Issued: Thu Jun 12 16:24:51 CDT 2014 Updated: Tue Jul 1 12:35:38 CDT 2014 Update: Corrected public key URL. Updated: Wed Jul 2 15:20:29 CDT 2014 Update: Added published advisory OpenSSL signature file. Updated: Thu Jul 3 07:42:49 CDT 2014 Update: Renamed tar file for T...

IBM AIX 6.1.8 - libodm Arbitrary File Write

IBM AIX 6.1.8 - libodm Arbitrary File Write Vulnerability title: Privilege Escalation in IBM AIX CVE: CVE-2014-3977 Vendor: IBM Product: AIX Affected version: 6.1.8 and later Fixed version: N/A Reported by: Tim Brown Details: It has been identified that libodm allows privilege escalation via...

IBM AIX 6.1.8 - 'libodm' Arbitrary File Write

Vulnerability title: Privilege Escalation in IBM AIX CVE: CVE-2014-3977 Vendor: IBM Product: AIX Affected version: 6.1.8 and later Fixed version: N/A Reported by: Tim Brown Details: It has been identified that libodm allows privilege escalation via arbitrary file writes with elevated privileges...

IBM AIX 6.1.8+ Privilege Escalation

Vulnerability title: Privilege Escalation in IBM AIX CVE: CVE-2014-3977 Vendor: IBM Product: AIX Affected version: 6.1.8 and later Fixed version: N/A Reported by: Tim Brown Details: It has been identified that libodm allows privilege escalation via arbitrary file writes with elevated privileges...

AIX OpenSSL Vulnerabilities (Multiple CVEs)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Wed Jun 11 06:39:27 CDT 2014 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory9.asc...

AIX OpenSSL Advisory : openssl_advisory8.doc

The version of OpenSSL installed on the remote host is potentially affected by a remote code execution or denial of service vulnerability. A race condition exists in the ssl3readbytes function in s3pkt.c in OpenSSL versions through 1.0.1g, when SSLMODERELEASEBUFFERS is enabled. This could allow...

CVE-2014-3977

libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on a temporary file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2179...

Design/Logic Flaw

libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on a temporary file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2179...

CVE-2014-3977

libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on a temporary file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2179...

CVE-2014-3977

CVE-2014-3977 affects IBM AIX 6.1, 7.1 and VIOS 2.2.x via libodm.a. Local users can overwrite arbitrary files through a symlink attack on a temporary file, due to an incomplete fix for CVE-2012-2179. This is a local-privilege context vulnerability stemming from the libodm implementation. Impact d...

CVE-2014-3982

include/testswebservers in Lynis before 1.5.5 on AIX allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis. file...

Code injection

include/testswebservers in Lynis before 1.5.5 on AIX allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis. file...

CVE-2014-3982

include/testswebservers in Lynis before 1.5.5 on AIX allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis. file...

CVE-2014-3982

include/testswebservers in Lynis before 1.5.5 on AIX allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis. file...

CVE-2014-3982

include/testswebservers in Lynis before 1.5.5 on AIX allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis. file...