AIX 610003 : U831190

The remote host is missing AIX PTF U831190 which is related to the security of the package bos.diag.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610001 : U828982

The remote host is missing AIX PTF U828982 which is related to the security of the package bos.rte.tty You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610001 : U831354

The remote host is missing AIX PTF U831354 which is related to the security of the package bos.rte.libcur You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610002 : U831162

The remote host is missing AIX PTF U831162 which is related to the security of the package bos.eccclient.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610003 : U831269

The remote host is missing AIX PTF U831269 which is related to the security of the package bos.perf.proctools You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610003 : U831206

The remote host is missing AIX PTF U831206 which is related to the security of the package devices.chrp.IBM.lhca.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc...

AIX 610003 : U834086

The remote host is missing AIX PTF U834086 which is related to the security of the package devices.tmiscsw.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610001 : U831329

The remote host is missing AIX PTF U831329 which is related to the security of the package devices.fcp.disk.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610001 : U831347

The remote host is missing AIX PTF U831347 which is related to the security of the package bos.dlc.8023 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610003 : U831181

The remote host is missing AIX PTF U831181 which is related to the security of the package bos.pmapi.pmsvcs You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610002 : U831118

The remote host is missing AIX PTF U831118 which is related to the security of the package devices.pci.e414a816.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 610001 : U828664

The remote host is missing AIX PTF U828664 which is related to the security of the package devices.graphics.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

CVE-2010-1347

IBM Systems Director, Director Agent 6.1 prior to 6.1.2.3 on AIX and Linux, is affected. The root cause is incorrect permissions on (1) diruninstall and (2) opt/ibm/director/bin/wcitinst, enabling local privilege escalation by executing these scripts. Exploitation details are not provided in the ...

CVE-2010-1347

Director Agent 6.1 before 6.1.2.3 in IBM Systems Director on AIX and Linux uses incorrect permissions for the 1 diruninstall and 2 opt/ibm/director/bin/wcitinst scripts, which allows local users to gain privileges by executing these scripts...

IBM AIX 5.3 getaddrinfo()函数远程拒绝服务漏洞

BUGTRAQ ID: 38964 CVE ID: CVE-2010-1124 IBM AIX是一款商业性质的UNIX操作系统。 IBM AIX在执行getaddrinfo调用后bos.rte.libc不支持读取某些地址字段，用户受骗访问了恶意服务器IP地址就会导致拒绝服务。 IBM AIX 5.3 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www-01.ibm.com/support/docview.wss?uid=isg1IZ66710...

Vulnerability in Diffie-Hellman ciphers affects sendmail on VIOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Mon Mar 29 15:54:57 CDT 2010 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/sendmailadvisory.asc VULNERABILITY SUMMARY VULNERABILITY: AIX sendmail SSL...

Code injection

bos.rte.libc 5.3.9.4 on IBM AIX 5.3 does not properly support reading a certain address field after a successful getaddrinfo function call, which allows context-dependent attackers to cause a denial of service application crash via unspecified vectors, as demonstrated by IBM DB2 crashes on "syste...

CVE-2010-1124

bos.rte.libc 5.3.9.4 on IBM AIX 5.3 does not properly support reading a certain address field after a successful getaddrinfo function call, which allows context-dependent attackers to cause a denial of service application crash via unspecified vectors, as demonstrated by IBM DB2 crashes on "syste...

CVE-2010-1124

CVE-2010-1124 affects bos.rte.libc 5.3.9.4 on IBM AIX 5.3. After a successful getaddrinfo call, reading a certain address field can cause an application crash (DoS) in contexts such as IBM DB2 databases cataloged with alternate IP addresses. The issue is due to improper handling in bos.rte.libc. ...

CVE-2010-1124

bos.rte.libc 5.3.9.4 on IBM AIX 5.3 does not properly support reading a certain address field after a successful getaddrinfo function call, which allows context-dependent attackers to cause a denial of service application crash via unspecified vectors, as demonstrated by IBM DB2 crashes on "syste...