AIX (IJ35226)

The version of AIX installed on the remote host is prior to APAR IJ35226. It is, therefore, affected by a vulnerability as referenced in the IJ35226 advisory. - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sensitive information...

Vulnerability in EFS affects AIX,Vulnerability in EFS affects AIX (CVE-2021-29861)

IBM SECURITY ADVISORY First Issued: Tue Nov 16 13:44:43 CST 2021 |Updated: Fri Mar 17 11:52:34 CDT 2023 |Update: Corrected the affected upper fileset levels for AIX 7.1 TL5 | to show that SP11 is affected. Added iFix for 7.1 TL5 SP11. The most recent version of this document is available here:...

CVE-2021-29861

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sensitive information. IBM X-Force ID: 206085...

GHSA-J79J-CX3H-G27H vulnerabilities

Vulnerabilities for packages: efs-utils...

GHSA-J79J-CX3H-G27H vulnerabilities

Vulnerabilities for packages: efs-utils...

CVE-2021-36942

Windows LSA Spoofing Vulnerability Recent assessments: jbaines-r7 at January 25, 2022 4:35pm UTC reported: Recently, I was attempting to combine James Forshaw’s remote EFSRPC file write “bug” with a local privilege escalation that I’d discovered. I was getting strange results. Working on one...

August 10, 2021—KB5005040 (OS Build 10240.19022) - EXPIRED

None None...

August 10, 2021—KB5005099 (Monthly Rollup)

None None...

August 10, 2021—KB5005095 (Security-only update)

None None...

August 10, 2021—KB5005094 (Security-only update)

None None...

August 10, 2021—KB5005106 (Security-only update)

None None...

August 10, 2021—KB5005090 (Monthly Rollup)

None None...

August 10, 2021—KB5005088 (Monthly Rollup)

None None...

EFS Easy Chat Server Information Disclosure

An information disclosure vulnerability exists in EFS Easy Chat Server. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

CVE-2020-35881 vulnerabilities

Vulnerabilities for packages: efs-utils...

CVE-2020-35881 vulnerabilities

Vulnerabilities for packages: efs-utils...

CloudGoat ECS_EFS_Attack Walkthrough

The post CloudGoat ECSEFSAttack Walkthrough appeared first on Rhino Security Labs...

webshop.efs-edelstahl.de Cross Site Scripting vulnerability OBB-1441562

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2019-14021

Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filename length and payload size received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in...

Buffer overflow

Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filename length and payload size received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in...