CVE-2016-2984

CVE-2016-2984 affects IBM Spectrum Scale/GPFS: local users can gain root privileges via crafted command-line parameters to a setuid binary in /usr/lpp/mmfs/bin. Affected versions include GPFS 3.5.x before 3.5.0.32, GPFS 4.1.x before 4.1.1.8, Spectrum Scale 4.1.1.x before 4.1.1.8, and 4.2.x before...

CVE-2016-2985

CVE-2016-2985 affects IBM Spectrum Scale/GPFS where a local attacker can gain root privileges by manipulating environment variables processed by setuid executables under /usr/lpp/mmfs/bin. Affected products/versions include IBM Spectrum Scale V4.2.0.x before 4.2.0.4, V4.1.1.x before 4.1.1.8, and ...

CVE-2016-0361

IBM General Parallel File System GPFS 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by discovering ADMI...

Design/Logic Flaw

IBM General Parallel File System GPFS 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by discovering ADMI...

CVE-2016-0361

IBM General Parallel File System GPFS 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by discovering ADMI...

CVE-2016-0361

IBM Spectrum Scale (GPFS) vulnerable when the Spectrum Scale GUI is used with DB2; remote authenticated users could disclose ADMIN passwords due to a flaw in the GUI interaction. Affected products include Elastic Storage Server and GPFS Storage Server configurations across multiple releases (e.g....

CVE-2016-0263

IBM Spectrum Scale 4.1 before 4.1.1.5 and 4.2 before 4.2.0.2 and General Parallel File System 3.5 before 3.5.0.30 allow local users to gain privileges or cause a denial of service via a crafted mmapplypolicy command...

CVE-2016-0392

IBM General Parallel File System GPFS in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x before 4.0.3, as distributed in Spectrum Scale RAID, allows local users to gain privileges via a crafted parameter to a setuid program...

Code injection

IBM General Parallel File System GPFS in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x before 4.0.3, as distributed in Spectrum Scale RAID, allows local users to gain privileges via a crafted parameter to a setuid program...

CVE-2016-0392

IBM General Parallel File System GPFS in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x before 4.0.3, as distributed in Spectrum Scale RAID, allows local users to gain privileges via a crafted parameter to a setuid program...

CVE-2016-0392

CVE-2016-0392 affects IBM GPFS/Spectrum Scale components. A local attacker could inject commands into setuid file parameters and execute as root due to a vulnerability in GPFS/Spectrum Scale. Affected: GPFS Storage Server 2.0.0–2.0.7; Elastic Storage Server 2.5.x–2.5.5, 3.x before 3.5.5, and 4.x ...

Security update for samba (important)

samba was updated to version 4.2.4 to fix 14 security issues. These security issues were fixed: - CVE-2015-5370: DCERPC server and client were vulnerable to DOS and MITM attacks bsc936862. - CVE-2016-2110: A man-in-the-middle could have downgraded NTLMSSP authentication bsc973031. - CVE-2016-2111...

IBM DB2 10.5 < Fix Pack 6 Multiple Vulnerabilities (Bar Mitzvah)

Binary data 9198.prm...

CVE-2015-7403

IBM Spectrum Scale 4.1.1.x before 4.1.1.3 and General Parallel File System GPFS 3.5.x before 3.5.0.29 and 4.1.x through 4.1.0.8 on AIX allow local users to cause a denial of service incorrect pointer dereference and node crash via unspecified vectors...

Null pointer dereference

IBM Spectrum Scale 4.1.1.x before 4.1.1.3 and General Parallel File System GPFS 3.5.x before 3.5.0.29 and 4.1.x through 4.1.0.8 on AIX allow local users to cause a denial of service incorrect pointer dereference and node crash via unspecified vectors...

CVE-2015-7403

IBM Spectrum Scale 4.1.1.x before 4.1.1.3 and General Parallel File System GPFS 3.5.x before 3.5.0.29 and 4.1.x through 4.1.0.8 on AIX allow local users to cause a denial of service incorrect pointer dereference and node crash via unspecified vectors...

CVE-2015-7430

The IBM Spectrum Scale (GPFS) Hadoop Connector is affected by CVE-2015-7430, impacting versions 1.1.1, 2.4, 2.5, and 2.7.0-0 through 2.7.0-2. An unprivileged user could read, write, modify, or delete GPFS data via unspecified vectors. The issue is mitigated by upgrading to version 2.7.0-3. IBM pr...

CVE-2015-7430

The Hadoop connector 1.1.1, 2.4, 2.5, and 2.7.0-0 before 2.7.0-3 for IBM Spectrum Scale and General Parallel File System GPFS allows local users to read or write to arbitrary GPFS data via unspecified vectors...

CVE-2015-7403

CVE-2015-7403 affects IBM Spectrum Scale (GPFS) on AIX, with vulnerable components including Spectrum Scale 4.1.x (before 4.1.1.3) and GPFS 3.5.x and 4.1.x (before 4.1.0.8/3.5.0.29). Root cause described as a local denial-of-service due to a user pointer dereference that can crash the node. Affec...

CVE-2015-4981

IBM General Parallel File System GPFS 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain sensitive information from system memory via unspecified vectors...