CVE-2011-1384

The 1 bin/invscoutClientVPDSurvey and 2 sbin/invscoutlsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout operations on arbitrary files, via a symlink attack on an unspecified file...

Design/Logic Flaw

The 1 bin/invscoutClientVPDSurvey and 2 sbin/invscoutlsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout operations on arbitrary files, via a symlink attack on an unspecified file...

CVE-2011-1384

CVE-2011-1384 affects IBM Inventory Scout (invscout.rte) on AIX: the binaries bin/invscoutClient_VPD_Survey and sbin/invscout_lsvpd prior to 2.2.0.19 are exposed to a symlink attack that lets local users delete arbitrary files or cause inventory scout operations on arbitrary files. Affected platf...

CVE-2011-1384

The 1 bin/invscoutClientVPDSurvey and 2 sbin/invscoutlsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout operations on arbitrary files, via a symlink attack on an unspecified file...

CVE-2011-4834

The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management ALM 11 on AIX, HP-UX, and Solaris allows local users to gain privileges via 1 a Trojan horse /tmp/tmp.txt FIFO or 2 a symlink attack on /tmp/tmp.txt...

Design/Logic Flaw

The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management ALM 11 on AIX, HP-UX, and Solaris allows local users to gain privileges via 1 a Trojan horse /tmp/tmp.txt FIFO or 2 a symlink attack on /tmp/tmp.txt...

CVE-2011-4834

The CVE-2011-4834 issue affects HP Application Lifecycle Management (ALM) 11 on AIX, HP-UX, and Solaris, specifically the GetInstalledPackages function in the configuration tool. It enables local privilege escalation via two attack vectors: (1) a Trojan horse placed in /tmp/tmp.txt as a FIFO, and...

CVE-2011-4834

The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management ALM 11 on AIX, HP-UX, and Solaris allows local users to gain privileges via 1 a Trojan horse /tmp/tmp.txt FIFO or 2 a symlink attack on /tmp/tmp.txt...

0A29-11-2 : Privilege escalation vulnerability in HP Application Lifestyle Management (ALM) Platform v11

================ Privilege escalation vulnerability in HP Application Lifestyle Management ALM Platform v11 Author: 0a29406d9794e4f9b30b3c5d6702c708 twitter.com/0a29 - 0a29.blogspot.com - GMail 0a2940 ================ Description: ================ The HP Application Lifestyle Management...

HP Application Lifestyle Management Platform 11 Code Execution

================ Privilege escalation vulnerability in HP Application Lifestyle Management ALM Platform v11 Author: 0a29406d9794e4f9b30b3c5d6702c708 twitter.com/0a29 - 0a29.blogspot.com - GMail 0a2940 ================ Description: ================ The HP Application Lifestyle Management...

[security bulletin] HPSBMU02726 SSRT100685 rev.1 - HP Operations Agent and Performance Agent for AIX, HP-UX, Linux, and Solaris, Local Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03091656 Version: 1 HPSBMU02726 SSRT100685 rev.1 - HP Operations Agent and Performance Agent for AIX, HP-UX, Linux, and Solaris, Local Unauthorized Access NOTICE: The information in this Security...

CVE-2011-4160

Unspecified vulnerability in HP Operations Agent 11.00 and Performance Agent 4.73 and 5.0 on AIX, HP-UX, Linux, and Solaris allows local users to bypass intended directory-access restrictions via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in HP Operations Agent 11.00 and Performance Agent 4.73 and 5.0 on AIX, HP-UX, Linux, and Solaris allows local users to bypass intended directory-access restrictions via unknown vectors...

CVE-2011-4160

CVE-2011-4160 affects HP Operations Agent v11.00 and HP Performance Agent v4.73 and v5.0 for AIX, HP-UX, Linux, and Solaris. Root cause: local unauthorized access to restricted directories due to an unspecified vulnerability in how these agents handle access controls. HP Security Bulletin HPSBMU0...

CVE-2011-4160

Unspecified vulnerability in HP Operations Agent 11.00 and Performance Agent 4.73 and 5.0 on AIX, HP-UX, Linux, and Solaris allows local users to bypass intended directory-access restrictions via unknown vectors...

Perl Digest Module Digest->new() Code Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Mon Nov 22 15:00:14 CST 2011 | Updated: Thu Feb 7 13:01:41 CST 2013 | Fixed vulnerable fileset levels | Added VIOS Levels under section V for Interim Fixes | Fixed availability dates The most recent version of this...

IBM AIX WPAR系统调用本地拒绝服务漏洞(CVE-2011-1375)

Bugtraq ID: 50670 CVE ID：CVE-2011-1375 IBM AIX是一款商业性质的操作系统。 IBM AIX报告存在一个安全漏洞，允许本地恶意用户进行拒绝服务攻击。 "wparlimitsconfig"和"wparlimitsmodify"系统调用中存在错误，本地攻击者可以利用漏洞使系统崩溃 IBM Aix 7.1.1 IBM Aix 7.1 IBM Aix 6.1.7 IBM Aix 6.1.6 IBM AIX 6.1.5 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...

Sendmail Mail Relay Vulnerability

Sendmail is prone to a mail relay vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sendmail:sendmail"; ifdescriptio...

Code injection

IBM AIX 6.1 and 7.1 does not restrict the wparlimitsconfig and wparlimitsmodify system calls, which allows local users to cause a denial of service system crash via a crafted call...

CVE-2011-1375

IBM AIX 6.1 and 7.1 does not restrict the wparlimitsconfig and wparlimitsmodify system calls, which allows local users to cause a denial of service system crash via a crafted call...