16252 matches found
CVE-2013-3005
The TFTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, when RBAC is enabled, allows remote authenticated users to bypass intended file-ownership restrictions, and read or overwrite arbitrary files, via unspecified vectors...
Design/Logic Flaw
The TFTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, when RBAC is enabled, allows remote authenticated users to bypass intended file-ownership restrictions, and read or overwrite arbitrary files, via unspecified vectors...
CVE-2013-3005
The TFTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, when RBAC is enabled, allows remote authenticated users to bypass intended file-ownership restrictions, and read or overwrite arbitrary files, via unspecified vectors...
CVE-2013-3005
CVE-2013-3005 affects the IBM AIX 6.1 and 7.1 TFTP client (and VIOS 2.2.2.2-FP-26 SP-02) where, with RBAC enabled, remote authenticated users can bypass file ownership restrictions and read or overwrite arbitrary files via tftp. Connected advisories document this as a client-side TFTP RBAC bypass...
AIX 6.1 TL 6 : tftp (IV40221)
A non-root user can read and overwrite files owned by others including root via tftp client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory tftpadvisory.asc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
AIX 7.1 TL 2 : tftp (IV42935)
A non-root user can read and overwrite files owned by others including root via tftp client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory tftpadvisory.asc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
AIX 6.1 TL 8 : tftp (IV42933)
A non-root user can read and overwrite files owned by others including root via tftp client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory tftpadvisory.asc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
AIX 7.1 TL 0 : tftp (IV42934)
A non-root user can read and overwrite files owned by others including root via tftp client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory tftpadvisory.asc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
AIX 7.1 TL 1 : tftp (IV42700)
A non-root user can read and overwrite files owned by others including root via tftp client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory tftpadvisory.asc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
AIX 6.1 TL 7 : tftp (IV42932)
A non-root user can read and overwrite files owned by others including root via tftp client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory tftpadvisory.asc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
tftp Security Vulnerability
IBM SECURITY ADVISORY First Issued: Wed Jul 3 09:33:57 CDT 2013 | Updated: Mon Oct 14 20:17:56 CDT 2013 | Update: Fixed vulnerable fileset levels | Update: More workarounds and CVSS Vector | Update: Includes VIOS in the vulnerability summary | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1...
CVE-2013-3035
The IPv6 implementation in the inet subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allows remote attackers to cause a denial of service system hang via a crafted packet to an IPv6 interface...
Design/Logic Flaw
The IPv6 implementation in the inet subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allows remote attackers to cause a denial of service system hang via a crafted packet to an IPv6 interface...
CVE-2013-3035
The IPv6 implementation in the inet subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allows remote attackers to cause a denial of service system hang via a crafted packet to an IPv6 interface...
CVE-2013-3035
CVE-2013-3035 affects IBM AIX IPv6 handling in the inet subsystem on AIX 6.1 and 7.1 and VIOS 2.2.2.2-FP-26 SP-02. A crafted IPv6 packet to an IPv6-enabled interface can cause a remote denial of service (system hang). The issue is tied to the INET IPv6 implementation, with Nessus and vendor advis...
[security bulletin] HPSBMU02884 rev.1 - HP Service Manager and HP ServiceCenter, Cross Site Scripting (XSS) and Disclosure of Information
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03784101 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03784101 Version: 1 HPSBMU02884 rev....
IBM AIX ibstat权限提升漏洞
IBM AIX是一款商业性质的操作系统 IBM AIX ibstat程序存在一个未明错误，允许本地攻击者利用漏洞获得root权限 0 IBM AIX 6.1 IBM AIX 7.1 厂商解决方案 用户可参考如下厂商提供的安全公告获得补丁信息： http://www-01.ibm.com/support/docview.wss?uid=isg1IV43106 http://www-01.ibm.com/support/docview.wss?uid=isg1IV43539 http://www-01.ibm.com/support/docview.wss?uid=isg1IV43561...
AIX 6.1 TL 8 : inet (IV42124)
If an AIX machine has IPv6 address configured, and if a malformed IPv6 packet in a specific format is sent to that machine, the machine can hang while processing that packet. The problem can happen only if an IPv6 address is configured on any of the network interfaces. %NASLMINLEVEL 70300 C Tenab...
AIX 7.1 TL 0 : inet (IV42264)
If an AIX machine has IPv6 address configured, and if a malformed IPv6 packet in a specific format is sent to that machine, the machine can hang while processing that packet. The problem can happen only if an IPv6 address is configured on any of the network interfaces. %NASLMINLEVEL 70300 C Tenab...
AIX 6.1 TL 6 : inet (IV37925)
If an AIX machine has IPv6 address configured, and if a malformed IPv6 packet in a specific format is sent to that machine, the machine can hang while processing that packet. The problem can happen only if an IPv6 address is configured on any of the network interfaces. %NASLMINLEVEL 70300 C Tenab...