CVE-2021-29741

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in Korn Shell ksh to gain root privileges. IBM X-Force ID: 201478...

UBUNTU-CVE-2020-4788

IBM Power9 AIX 7.1, 7.2, and VIOS 3.1 processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296...

Sollae Serial-Ethernet-Module and Remote-I/O-Device-Server Device Security Bypass Vulnerability

Sollae Serial-Ethernet-Module and Remote-I/O-Device-Server are both products of Sollae Systems Korea.Sollae Serial-Ethernet-Module is an Ethernet module capable of monitoring and controlling serial devices over a network. Remote-I/O-Device-Server is a server device for remote control and monitori...

CVE-2017-1304

IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server ESS/GPFS Storage Server GSS during testing of an unsupported configuration, where users applications are running on an active ESS I/O server node and utilize direct I/O to perform a read or a...

CVE-2016-0281

The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumboframes feature is not enabled, allows remote attackers to cause a denial of service FC1763 or FC5899 adapter crash via crafted packets...

CVE-2015-7926

eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests, which allows remote attackers to obtain sensitive information via an unspecified URL...

Information disclosure

eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests, which allows remote attackers to obtain sensitive information via an unspecified URL...

IBM AIX/Virtual I/O Server OpenSSH AES-GCM密文特权提升漏洞

CVE ID:CVE-2013-4548 IBM AIX是一款商业性质的操作系统。 IBM AIX / Virtual I/O Server包含的OpenSSH存在安全漏洞密钥交换过程中选择AES-GCM密文存在错误，允许恶意本地用户利用漏洞提升权限。 0 IBM AIX 5.x IBM AIX 6.x IBM AIX 7.x IBM Virtual I/O Server VIOS 1.x IBM Virtual I/O Server VIOS 2.x 厂商补丁： IBM ----- 用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞：...

IBM AIX和Virtual I/O Server 'dupmsg'系统呼叫本地拒绝服务漏洞

BUGTRAQ ID: 54706 CVE ID: CVE-2012-0723 AIX是一个基于开放标准的UNIX操作系统，为用户提供企业信息技术基础架构。Virtual I/O Server 提供了命令行的管理方式，通过命令行可以管理VIOS。 IBM AIX和Virtual I/O Server在导出"dupmsg"内核扩展调用到用户空间时存在错误，在实现上存在本地拒绝服务漏洞，攻击者可利用此漏洞使受影响计算机崩溃。 0 IBM AIX 7.x IBM AIX 6.x IBM AIX 5.x IBM Virtual I/O Server VIOS 2.x 厂商补丁： IBM ---...

IBM AIX 'rpc.cmsd'日历守护进程远程栈缓冲区溢出漏洞

Bugraq ID: 36615 IBM AIX是一款商业性质的操作系统。 IBM AIX rpc.cmsd存在缓冲区溢出问题，远程攻击者可以利用漏洞以root进程权限执行任意指令。 处理远程过程21的请求时存在漏洞，此函数接收两个参数，都为XDR字符串，当拷贝第一个参数到基于栈的缓冲区时，代码没有正确校验它的长度，可触发基于栈的缓冲区溢出。要利用此漏洞，攻击者需要通过RCP连接目标主机，不需要验证通过。 IBM Virtual I/O Server VIOS 2.1 IBM Virtual I/O Server VIOS 1.5.2 IBM Virtual I/O Server VIO...

Design/Logic Flaw

Unspecified vulnerability in IBM Hardware Management Console HMC 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server VIOS partitions. NOTE: some of...

CVE-2009-1806

Unspecified vulnerability in IBM Hardware Management Console HMC 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server VIOS partitions. NOTE: some of...

OS Identification : Telnet

Nessus was able to identify the remote operating system based on the telnet banner. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid29831; scriptversion"1.103"; scriptsetattributeattribute:"pluginmodificationdate",...