CVE-2016-6038

Directory traversal vulnerability in Eclipse Help in IBM Tivoli Lightweight Infrastructure aka LWI, as used in AIX 5.3, 6.1, and 7.1, allows remote authenticated users to read arbitrary files via a crafted URL...

Vulnerability in Tivoli LWI impacts pConsole and WebSM for AIX

pconsoleadvisory.asc: Version 2 Version 2 Issued: Fri Sep 30 14:51:49 CDT 2016 Version 2 Changes: iFixes added for the latest, impacted, supported AIX TLs. IBM SECURITY ADVISORY First Issued: Thu Sep 22 16:13:43 CDT 2016 |Updated: Fri Sep 30 14:51:49 CDT 2016 |Update: iFixes added for the latest,...

Vulnerability in Tivoli LWI impacts pConsole and WebSM for AIX

pconsoleadvisory.asc: Version 3 Version 3 Issued: Tue Oct 25 14:55:49 CDT 2016 Version 3 Changes: Changed the impacted upper level filesets to match those in the iFixes. Clarified that at least one of sysmgt.pconsole.rte or sysmgt.websm.rte must be present in order to be impacted by this...

AIX OpenSSH Vulnerability

IBM SECURITY ADVISORY First Issued: Thu Sep 8 14:36:37 CDT 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory9.asc https://aix.software.ibm.com/aix/efixes/security/opensshadvisory9.asc...

AIX 5.3 TL 12 : ntp (IV87614) (deprecated)

NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2015-7974 NTP could allow a remote authenticated attacker to conduct spoofing attacks, caused by a missing key check. An attacker could exploit this vulnerability to impersonate a peer. NTP could allow a local attacker to bypass...

AIX 7.1 TL 3 : ntp (IV87615) (deprecated)

NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2015-7974 NTP could allow a remote authenticated attacker to conduct spoofing attacks, caused by a missing key check. An attacker could exploit this vulnerability to impersonate a peer. NTP could allow a local attacker to bypass...

AIX 7.1 TL 4 : ntp (IV87420) (deprecated)

NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2015-7974 NTP could allow a remote authenticated attacker to conduct spoofing attacks, caused by a missing key check. An attacker could exploit this vulnerability to impersonate a peer. NTP could allow a local attacker to bypass...

AIX 7.2 TL 0 : ntp (IV87939) (deprecated)

NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2015-7974 NTP could allow a remote authenticated attacker to conduct spoofing attacks, caused by a missing key check. An attacker could exploit this vulnerability to impersonate a peer. NTP could allow a local attacker to bypass...

AIX 6.1 TL 9 : ntp (IV87419) (deprecated)

NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2015-7974 NTP could allow a remote authenticated attacker to conduct spoofing attacks, caused by a missing key check. An attacker could exploit this vulnerability to impersonate a peer. NTP could allow a local attacker to bypass...

Vulnerabilities in NTP affect AIX,Vulnerabilities in NTP affect VIOS

ntpadvisory7.asc: Version 2 Version 2 Issued: Tue Sep 13 08:23:22 CDT 2016 Version 2 Changes: Changed the impacted upper level filesets listed for NTPv4. The new levels should match the prereqs as listed in the iFixes. IBM SECURITY ADVISORY First Issued: Tue Sep 6 09:07:16 CDT 2016 |Updated: Tue...

Multiple vulnerabilities in IBM Java SDK affect AIX

IBM SECURITY ADVISORY First Issued: Thu Aug 18 15:35:03 CDT 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javajuly2016advisory.asc https://aix.software.ibm.com/aix/efixes/security/javajuly2016advisory.asc...

CVE-2016-0281

The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumboframes feature is not enabled, allows remote attackers to cause a denial of service FC1763 or FC5899 adapter crash via crafted packets...

CVE-2016-0281

The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumboframes feature is not enabled, allows remote attackers to cause a denial of service FC1763 or FC5899 adapter crash via crafted packets...

CVE-2016-0266

IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via unspecified vectors...

CVE-2016-0266

IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via unspecified vectors...

Design/Logic Flaw

The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumboframes feature is not enabled, allows remote attackers to cause a denial of service FC1763 or FC5899 adapter crash via crafted packets...

Default credentials

IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via unspecified vectors...

CVE-2016-0281

Technical details (affected products/versions, root cause, exploitability, fixes) are not publicly provided in the connected documents; monitor for updates from IBM AIX advisories.

CVE-2016-0266

IBM AIX and VIOS are affected by CVE-2016-0266, where AIX 5.3, 6.1, 7.1, 7.2 and VIOS 2.2.x do not default to the latest TLS version, enabling MITM exposure to obtain sensitive information via unspecified vectors. The issue is linked to pconsole and related TLS handling, with CVSS base context sh...

CVE-2016-0266

IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via unspecified vectors...