AIX 7.1 TL 3 : bos.rte.control (U862099)

The remote host is missing AIX PTF U862099, which is related to the security of the package bos.rte.control. Libxml2 is vulnerable to a denial of service, caused by the expansion of internal entities within the xmlParserHandlePEReference. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

AIX 6.1 TL 9 : bos.rte.control (U861276)

The remote host is missing AIX PTF U861276, which is related to the security of the package bos.rte.control. Libxml2 is vulnerable to a denial of service, caused by the expansion of internal entities within the xmlParserHandlePEReference. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

AIX OpenSSL Advisory : openssl_advisory11.asc (POODLE)

The version of OpenSSL installed on the remote host is affected by the following vulnerabilities : - An error exists related to DTLS SRTP extension handling and specially crafted handshake messages that can allow denial of service attacks via memory leaks. CVE-2014-3513 - A man-in-the-middle MitM...

AIX OpenSSL Denial of Service due to memory leak in DTLS / AIX OpenSSL Patch to mitigate CVE-2014-3566 / AIX OpenSSL Denial of Service due to memory consumption

IBM SECURITY ADVISORY First Issued: The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory11.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory11.asc...

CVE-2014-3074 - Runtime Linker Allows Privilege Escalation Via Arbitrary File Writes in IBM AIX

Vulnerability title: Runtime Linker Allows Privilege Escalation Via Arbitrary File Writes in IBM AIX CVE: CVE-2014-3074 Vendor: IBM Product: AIX Affected version: AIX 6.1 and 7.1 and VIOS 2.2. Reported by: Tim Brown Details: It has been identified that the runtime linker allows privilege escalati...

IBM AIX privilege escalation

Privilege escalation via runtime linker...

AIX OpenSSL Advisory : openssl_advisory10.asc

The version of OpenSSL installed on the remote host is affected by the following vulnerabilities : - A memory double-free error exists related to handling DTLS packets that allows denial of service attacks. CVE-2014-3505 - An unspecified error exists related to handling DTLS handshake messages th...

AIX OpenSSL Denial of Service due to double free and others

IBM SECURITY ADVISORY First Issued: The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory10.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory10.asc...

CVE-2014-4805

IBM DB2 10.5 before FP4 on Linux and AIX creates temporary files during CDE table LOAD operations, which allows local users to obtain sensitive information by reading a file while a LOAD is occurring...

Information disclosure

IBM DB2 10.5 before FP4 on Linux and AIX creates temporary files during CDE table LOAD operations, which allows local users to obtain sensitive information by reading a file while a LOAD is occurring...

CVE-2014-4805

IBM DB2 10.5 before FP4 on Linux and AIX is affected by CVE-2014-4805. During LOAD into Columnar Data Engine (CDE) tables, DB2 may create a temporary file containing user data that exists only for the duration of the LOAD operation and is removed on completion, enabling local disclosure of data. ...

CVE-2014-4805

IBM DB2 10.5 before FP4 on Linux and AIX creates temporary files during CDE table LOAD operations, which allows local users to obtain sensitive information by reading a file while a LOAD is occurring...

AIX NAS Advisory : nas_advisory1.asc

The version of the Network Authentication Service NAS installed on the remote AIX host is affected by the following vulnerabilities related to Kerberos 5 : - An attacker can cause a denial of service buffer over-read and application crash by injecting invalid tokens into a GSSAPI application...

Multiple Security vulnerabilities in IBM NAS

IBM SECURITY ADVISORY First Issued : Thu Aug 28 03:15:00 CDT 2014 | Updated: Fri Sep 5 01:11:34 CDT 2014 | Update: The same ifix with a packaging change has been added in | Update: "A. FIXES" section. The most recent version of this document is available here:...

AIX 6.1 TL 8 : X11.base.rte (U865364)

The remote host is missing AIX PTF U865364, which is related to the security of the package X11.base.rte. Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service...

AIX 6.1 TL 8 : bos.rte.odm (U865667)

The remote host is missing AIX PTF U865667, which is related to the security of the package bos.rte.odm. AIX could allow a arbitrary file overwrite symlink vulnerability due to libodm.a bug. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

AIX 6.1 TL 7 : X11.base.rte (U865621)

The remote host is missing AIX PTF U865621, which is related to the security of the package X11.base.rte. Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service...

AIX 6.1 TL 7 : bos.mp64 (U861576)

The remote host is missing AIX PTF U861576, which is related to the security of the package bos.mp64. IBM AIX is vulnerable to a denial of service, caused by an error in the ptrace function. A local attacker could exploit this vulnerability to cause a system crash. %NASLMINLEVEL 70300 C Tenable...

AIX 6.1 TL 8 : bos.mp64 (U862133)

The remote host is missing AIX PTF U862133, which is related to the security of the package bos.mp64. IBM AIX is vulnerable to a denial of service, caused by an error in the ptrace function. A local attacker could exploit this vulnerability to cause a system crash. %NASLMINLEVEL 70300 C Tenable...

AIX 6.1 TL 7 : bos.rte.odm (U865807)

The remote host is missing AIX PTF U865807, which is related to the security of the package bos.rte.odm. AIX could allow a arbitrary file overwrite symlink vulnerability due to libodm.a bug. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...