AIX 7.1 TL 2 : nettcp (IV73418) (POODLE)

A man-in-the-middle MitM information disclosure vulnerability, known as POODLE, exists due to the way SSL 3.0 handles padding bytes when decrypting messages encrypted using block ciphers in cipher block chaining CBC mode. A MitM attacker can decrypt a selected byte of a cipher text in as few as 2...

AIX 6.1 TL 9 : nettcp (IV73417) (POODLE)

A man-in-the-middle MitM information disclosure vulnerability, known as POODLE, exists due to the way SSL 3.0 handles padding bytes when decrypting messages encrypted using block ciphers in cipher block chaining CBC mode. A MitM attacker can decrypt a selected byte of a cipher text in as few as 2...

AIX 7.1 TL 3 : nettcp (IV73419) (POODLE)

A man-in-the-middle MitM information disclosure vulnerability, known as POODLE, exists due to the way SSL 3.0 handles padding bytes when decrypting messages encrypted using block ciphers in cipher block chaining CBC mode. A MitM attacker can decrypt a selected byte of a cipher text in as few as 2...

AIX 6.1 TL 8 : nettcp (IV73416) (POODLE)

A man-in-the-middle MitM information disclosure vulnerability, known as POODLE, exists due to the way SSL 3.0 handles padding bytes when decrypting messages encrypted using block ciphers in cipher block chaining CBC mode. A MitM attacker can decrypt a selected byte of a cipher text in as few as 2...

AIX 6.1 TL 8 : nettcp (IV73973) (POODLE)

A man-in-the-middle MitM information disclosure vulnerability, known as POODLE, exists due to the way SSL 3.0 handles padding bytes when decrypting messages encrypted using block ciphers in cipher block chaining CBC mode. A MitM attacker can decrypt a selected byte of a cipher text in as few as 2...

Vulnerability in SSLv3 affects AIX,Vulnerability in SSLv3 affects VIOS

IBM SECURITY ADVISORY First Issued: Wed Jun 17 09:52:06 CDT 2015 |Updated: Tue Mar 1 10:07:14 CST 2016 |Update: Modified the impacted upper level fileset for 7.1.3 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/nettcpadvisory.asc...

AIX Java Advisory : java_april2015_advisory.asc (Bar Mitzvah) (FREAK)

The version of Java SDK installed on the remote AIX host is affected by multiple vulnerabilities : - The Global Security Kit GSKit contains a flaw due to improper restrictions of TLS state transitions. A man-in-the-middle attacker can exploit this to downgrade the security of a session to use...

CA20150604-01: Security Notice for CA Common Services

-----BEGIN PGP SIGNED MESSAGE----- CA20150604-01: Security Notice for CA Common Services Issued: June 4, 2015 CA Technologies Support is alerting customers to multiple potential risks with products that bundle CA Common Services on Unix/Linux platforms. A local attacker may exploit these...

Multiple vulnerabilities in IBM Java SDK affect AIX

IBM SECURITY ADVISORY First Issued: Wed Jun 3 12:58:42 CDT 2015 |Updated: Wed Jun 3 16:10:11 CDT 2015 |Update: Corrected affected fileset levels The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javaapril2015advisory.asc...

AIX 7.1 TL 3 : bos.rte.lvm (U865854)

The remote host is missing AIX PTF U865854, which is related to the security of the package bos.rte.lvm. The running of lquerylv command with variable DBGCMDLQUERYLV set may allow a local user to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

AIX 6.1 TL 9 : bos.rte.lvm (U865862)

The remote host is missing AIX PTF U865862, which is related to the security of the package bos.rte.lvm. The running of lquerylv command with variable DBGCMDLQUERYLV set may allow a local user to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

AIX NAS Advisory : nas_advisory3.asc

The version of the Network Authentication Service NAS installed on the remote AIX host is affected by the following vulnerabilities related to Kerberos 5 : - Denial of service and remote code execution vulnerabilities exist due to security context handles not being properly maintained, allowing a...

Multiple Security vulnerabilities in IBM NAS(kerberos)

IBM SECURITY ADVISORY First Issued : Thu May 21 05:06:05 CDT 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/nasadvisory3.asc https://aix.software.ibm.com/aix/efixes/security/nasadvisory3.asc...

AIX Java Advisory : Multiple Vulnerabilities (Bar Mitzvah)

The version of Java SDK installed on the remote host is affected by multiple vulnerabilities : - A man-in-the-middle information disclosure vulnerability exists due to a TLS security downgrade flaw. A man-in-the-middle attacker may be able to downgrade the SSL/TLS connection to use EXPORTRSA ciph...

Vulnerability in RC4 stream cipher affects AIX,Vulnerability in RC4 stream cipher affects ftpd/sendmail_ssl/imapd/popd on AIX,Vulnerability in RC4 stream cipher affects ftpd/sendmail_ssl/imapd/popd on VIOS

IBM SECURITY ADVISORY First Issued: Mon Apr 27 15:27:04 CDT 2015 | Updated: Tue Dec 15 11:54:19 CST 2015 | Update: Added all information for ftpd, sendmailssl, imapd, and popd The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/rc4advisory.a...

AIX OpenSSL Advisory : openssl_advisory13.asc

The version of OpenSSL installed on the remote AIX host is affected by the following vulnerabilities : - A use-after-free condition exists in the d2iECPrivateKey function due to improper processing of malformed EC private key files during import. A remote attacker can exploit this to dereference ...

AIX IBM SDK Java JSSE vulnerability

IBM SECURITY ADVISORY First Issued: Mon Apr 13 12:11:24 CDT 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javajsseadvisory.asc https://aix.software.ibm.com/aix/efixes/security/javajsseadvisory.asc...

Multiple Security vulnerabilities in AIX OpenSSL

IBM SECURITY ADVISORY First Issued: The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory13.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory13.asc...

AIX 7.1 TL 3 : tcpdump (IV67588)

CVE-2014-8769 tcpdump is vulnerable to a denial of service, caused by the improper handling of input by the application decoder for the Ad hoc On-Demand Distance Vector AODV protocol. By sending specially-crafted data, a remote attacker could exploit this vulnerability to cause the application to...

AIX 6.1 TL 9 : tcpdump (IV68992)

CVE-2014-8769 tcpdump is vulnerable to a denial of service, caused by the improper handling of input by the application decoder for the Ad hoc On-Demand Distance Vector AODV protocol. By sending specially-crafted data, a remote attacker could exploit this vulnerability to cause the application to...