AIX 7.2 TL 1 : bellmail (IV92242) (deprecated)

https://vulners.com/cve/CVE-2017-1093 https://vulners.com/cve/CVE-2017-1093 IBM AIX could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...

AIX 7.1 TL 4 : bellmail (IV92240) (deprecated)

https://vulners.com/cve/CVE-2017-1093 https://vulners.com/cve/CVE-2017-1093 IBM AIX could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...

AIX 6.1 TL 9 : bellmail (IV92238) (deprecated)

https://vulners.com/cve/CVE-2017-1093 https://vulners.com/cve/CVE-2017-1093 IBM AIX could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...

There is a vulnerability in bellmail that impacts AIX.,There is a vulnerability in bellmail that impacts VIOS.

IBM SECURITY ADVISORY First Issued: Sun Jan 29 01:19:56 CST 2017 |Updated: Wed Jul 26 12:40:04 CDT 2017 |Update 1: Changed impacted upper level fileset level for AIX 7.2.1 to | bos.net.tcp.clientcore 7.2.1.0. The most recent version of this document is available here:...

IBM AIX 6.1/7.1/7.2 - 'Bellmail' Local Privilege Escalation

!/usr/bin/sh CVE-2016-8972/bellmailroot.sh: IBM AIX Bellmail local root Affected versions: AIX 6.1, 7.1, 7.2 VIOS 2.2.x Fileset Lower Level Upper Level KEY --------------------------------------------------------- bos.net.tcp.client 6.1.9.0 6.1.9.200 keywfs bos.net.tcp.client 7.1.3.0 7.1.3.47...

IBM AIX 6.1 / 7.1 / 7.2 Bellmail Privilege Escalation

!/usr/bin/sh CVE-2016-8972/bellmailroot.sh: IBM AIX Bellmail local root Affected versions: AIX 6.1, 7.1, 7.2 VIOS 2.2.x Fileset Lower Level Upper Level KEY --------------------------------------------------------- bos.net.tcp.client 6.1.9.0 6.1.9.200 keywfs bos.net.tcp.client 7.1.3.0 7.1.3.47...

IBM AIX 6.17.17.2 - Bellmail Local Privilege Escalation

IBM AIX 6.17.17.2 - Bellmail Local Privilege Escalation !/usr/bin/sh CVE-2016-8972/bellmailroot.sh: IBM AIX Bellmail local root Affected versions: AIX 6.1, 7.1, 7.2 VIOS 2.2.x Fileset Lower Level Upper Level KEY --------------------------------------------------------- bos.net.tcp.client 6.1.9.0...

IBM AIX 6.1/7.1/7.2 - Bellmail Privilege Escalation Vulnerability

Exploit for aix platform in category local exploits !/usr/bin/sh CVE-2016-8972/bellmailroot.sh: IBM AIX Bellmail local root Affected versions: AIX 6.1, 7.1, 7.2 VIOS 2.2.x Fileset Lower Level Upper Level KEY --------------------------------------------------------- bos.net.tcp.client 6.1.9.0...

AIX 7.2 TL 0 : bellmail (IV91010) (deprecated)

https://vulners.com/cve/CVE-2016-8972 https://vulners.com/cve/CVE-2016-8972 IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...

AIX 7.2 TL 1 : bellmail (IV91011) (deprecated)

https://vulners.com/cve/CVE-2016-8972 https://vulners.com/cve/CVE-2016-8972 IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...

AIX 7.1 TL 4 : bellmail (IV91008) (deprecated)

https://vulners.com/cve/CVE-2016-8972 https://vulners.com/cve/CVE-2016-8972 IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...

AIX 7.1 TL 3 : bellmail (IV91007) (deprecated)

https://vulners.com/cve/CVE-2016-8972 https://vulners.com/cve/CVE-2016-8972 IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...

AIX 6.1 TL 9 : bellmail (IV91006) (deprecated)

https://vulners.com/cve/CVE-2016-8972 https://vulners.com/cve/CVE-2016-8972 IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...

Vulnerability in bellmail affects AIX,Vulnerability in bellmail affects VIOS

IBM SECURITY ADVISORY First Issued: Thu Dec 15 15:12:23 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bellmailadvisory.asc https://aix.software.ibm.com/aix/efixes/security/bellmailadvisory.asc...

AIX 5.1 Bellmail Local Race Condition Exploit Exploit

No description provided by source. -bash-2.05b$ -bash-2.05b$ cat xaix5bellmail.pl !/usr/bin/perl FileName: xaix5bellmail.pl Exploit Race condition vulnerability BUGTRAQ ID: 8805 of /usr/bin/bellmail command on Aix5 to change any file owner to current user. Usage : xaix5bellmail.pl aimfile aimfile...

IBM AIX bellmail 有邮件用户代理本地栈溢出漏洞

BUGTRAQ ID: 26257 CVECAN ID: CVE-2007-4623 IBM AIX是一款商业性质的UNIX操作系统。 AIX的bellmail工具实现上存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞提升权限。 AIX中所安装的bellmail程序中的sendrmt函数存在栈溢出漏洞，当用户试图使用“m”命令发送邮件时会调用该函数。在这个函数中，调用了一些sprintf以将用户提供的输入连接到静态字符串，但没有执行边界检查来确保所生成的字符串会适合栈上所分配的目标缓冲区，因此攻击者可以提供超长参数控制栈上数据和受影响进程，导致以root权限执行任意指令。 IBM AIX 5...

Stack overflow

Stack-based buffer overflow in the sendrmt function in bellmail in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via a long parameter to the m command...

CVE-2007-4623

Stack-based buffer overflow in the sendrmt function in bellmail in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via a long parameter to the m command...

CVE-2007-4623

CVE-2007-4623 is a local stack-based buffer overflow in the bellmail utility on IBM AIX 5.2/5.3. The vulnerability exists in the bellmail/sendrmt function, where user input is concatenated with static strings using sprintf without proper bounds checking, allowing a local attacker to overflow the ...

CVE-2007-4623

Stack-based buffer overflow in the sendrmt function in bellmail in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via a long parameter to the m command...