AIX 5.3 TL 8 : at (IZ43455)

The at command does not drop permissions when reading certain files. A local attacker may exploit this error to read any file on the system because the command is setuid root. The following file is vulnerable : /usr/bin/at. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the...

AIX 5.2 TL 0 : swcons (IZ18335)

A file permission/ownership vulnerability exists in the 'bos.rte.console' fileset command listed below whereby a local attacker may create arbitrary contents within a file owned by root using the 'swcons' command. The local attacker must be a member of the 'system' group gid=0 to execute this...

AIX 7.1 TL 0 : socket (IV21131)

When socketpair calls are used on the system we could see a crash in socket code path due to the fact that one of the socket is in the free list. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory socketadvisory.asc...

AIX 5.2 TL 0 : muxatmd (IZ48495)

The muxatmd command contains a buffer which can overflow. A local attacker may exploit this overflow to execute arbitrary code with root privileges because the command is setuid root. The following file is vulnerable : /usr/sbin/muxatmd. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The te...

AIX 5.3 TL 8 : muxatmd (IZ48500)

The muxatmd command contains a buffer which can overflow. A local attacker may exploit this overflow to execute arbitrary code with root privileges because the command is setuid root. The following file is vulnerable : /usr/sbin/muxatmd. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The te...

AIX 5.3 TL 9 : muxatmd (IZ48501)

The muxatmd command contains a buffer which can overflow. A local attacker may exploit this overflow to execute arbitrary code with root privileges because the command is setuid root. The following file is vulnerable : /usr/sbin/muxatmd. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The te...

AIX 6.1 TL 0 : ps (IZ11244)

An information leak exists in the 'bos.rte.control' fileset commands listed below. A local attacker may access sensitive information for arbitrary processes. The following commands are vulnerable : /usr/bin/ps. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was...

AIX 6.1 TL 0 : muxatmd (IZ48502)

The muxatmd command contains a buffer which can overflow. A local attacker may exploit this overflow to execute arbitrary code with root privileges because the command is setuid root. The following file is vulnerable : /usr/sbin/muxatmd. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The te...

AIX 5.3 TL 7 : muxatmd (IZ48499)

The muxatmd command contains a buffer which can overflow. A local attacker may exploit this overflow to execute arbitrary code with root privileges because the command is setuid root. The following file is vulnerable : /usr/sbin/muxatmd. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The te...

AIX 6.1 TL 1 : muxatmd (IZ48561)

The muxatmd command contains a buffer which can overflow. A local attacker may exploit this overflow to execute arbitrary code with root privileges because the command is setuid root. The following file is vulnerable : /usr/sbin/muxatmd. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The te...

AIX 5.3 TL 7 : iostat (IZ22351)

The iostat command contains an environment variable handling error. A local attacker may exploit this error to execute arbitrary code with root privileges because the command is setuid root. The following files are vulnerable : /usr/bin/iostat. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

AIX 5.3 TL 7 : errpt (IZ22347)

The errpt command contains a buffer which can overflow. A local attacker may exploit this overflow to execute arbitrary code with root privileges because the command is setuid root. The following files are vulnerable : /usr/bin/errpt. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text ...

CVE-2012-5308

Cross-site request forgery CSRF vulnerability in servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 allows remote attackers to hijack the authentication of arbitrary users for requests that create problem reports via a getReportProblem upload action...

IBM solidDB 6.5 < 6.5.0.8 Interim Fix 6 Redundant WHERE Clause Select Statement Parsing Remote DoS

According to its version number, the solidDB install on the remote host is affected by a denial of service vulnerability due to a flaw in the way the application handles 'SELECT' statements containing a redundant WHERE condition. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Design/Logic Flaw

The server in IBM solidDB 6.5 before Interim Fix 6 does not properly initialize data structures, which allows remote authenticated users to cause a denial of service daemon crash via a SELECT statement with a redundant WHERE condition...

CVE-2012-0200

The CVE-2012-0200 entry affects IBM solidDB 6.5 prior to Interim Fix 6, where a flaw in handling SELECT statements with a redundant WHERE condition leads to a denial of service (daemon crash). Multiple connected sources corroborate a remote DoS vector tied to parsing/initialization issues (e.g., ...

IBM Tivoli Directory Server Multiple Vulnerabilities

IBM Tivoli Directory Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Tivoli Directory Server DIGEST-MD5 Denial of Service Vulnerability

The host is running IBM Tivoli Directory Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbibmtivolidirserverdigestmd5dosvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ IBM Tivoli Directory Server DIGEST-MD5 Denial of Service Vulnerability Authors: Sooraj KS...

httpd: mod_proxy_http DoS via excessive interim responses from the origin server

A flaw was found in the modproxy module. An attacker who has control of a web server to which requests are being proxied could cause a limited denial of service due to CPU consumption and stack exhaustion. CVE-2008-2364...

Apache 'mod_proxy_http' Interim Response Denial of Service Vulnerability

CVE: CVE-2008-2364 The Apache 'modproxyhttp' module is prone to a denial-of-service vulnerability that affects the processing of interim responses. Attackers may exploit this issue to cause denial-of-service conditions. Reportedly, the issue affects Apache 2.2.8 and 2.0.63; other versions may als...