IBM PowerHA for AIX Local Privilege Vulnerability

IBM PowerHA for AIX is a set of solutions that enable systems to cope with failures and reduce application downtime. A local elevation of privilege vulnerability exists in IBM PowerHA for AIX, which allows an attacker to exploit the vulnerability to elevate privileges and gain root privileges...

AIX 6.1 TL 0 : powerha (IV76943) (deprecated)

IBM PowerHA SystemMirror has a systems management feature CSPOC which includes an option to allow users to change their password cluster-wide. Once added to this list, a non-root user may be able to exploit a vulnerability in one of the scripts shipped with the product to switch user su to the ro...

AIX PowerHA Cluster Management Unspecified Remote Configuration Manipulation

An unspecified vulnerability in the IBM PowerHA Cluster Management monitoring of port 6177 could allow a remote attacker to make unauthorized changes the remote host's AIX configuration. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Code injection

Unspecified vulnerability in the Cluster Management component in IBM PowerHA 5.4, 5.4.1, 5.5, and 6.1 on AIX allows remote attackers to modify the operating-system configuration via packets to the godm port 6177/tcp...

CVE-2009-3900

Unspecified vulnerability in the Cluster Management component in IBM PowerHA 5.4, 5.4.1, 5.5, and 6.1 on AIX allows remote attackers to modify the operating-system configuration via packets to the godm port 6177/tcp...

CVE-2009-3900

Unspecified vulnerability in the Cluster Management component in IBM PowerHA 5.4, 5.4.1, 5.5, and 6.1 on AIX allows remote attackers to modify the operating-system configuration via packets to the godm port 6177/tcp...

CVE-2009-3900

CVE-2009-3900 affects IBM PowerHA Cluster Management on AIX (versions 5.4/5.4.1/5.5/6.1). The vulnerability allows a remote attacker to modify the operating-system configuration by sending packets to the godm port (6177/tcp). The provided connected Nessus entry confirms an unspecified remote conf...