IBM AIX 6.1 / 7.1 / 7.2 Bellmail Privilege Escalation

!/usr/bin/sh CVE-2016-8972/bellmailroot.sh: IBM AIX Bellmail local root Affected versions: AIX 6.1, 7.1, 7.2 VIOS 2.2.x Fileset Lower Level Upper Level KEY --------------------------------------------------------- bos.net.tcp.client 6.1.9.0 6.1.9.200 keywfs bos.net.tcp.client 7.1.3.0 7.1.3.47...

IBM AIX 6.1/7.1/7.2 - 'Bellmail' Local Privilege Escalation

!/usr/bin/sh CVE-2016-8972/bellmailroot.sh: IBM AIX Bellmail local root Affected versions: AIX 6.1, 7.1, 7.2 VIOS 2.2.x Fileset Lower Level Upper Level KEY --------------------------------------------------------- bos.net.tcp.client 6.1.9.0 6.1.9.200 keywfs bos.net.tcp.client 7.1.3.0 7.1.3.47...

Vulnerability in bellmail affects AIX,Vulnerability in bellmail affects VIOS

IBM SECURITY ADVISORY First Issued: Thu Dec 15 15:12:23 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bellmailadvisory.asc https://aix.software.ibm.com/aix/efixes/security/bellmailadvisory.asc...

Vulnerabilities in BIND impact AIX,Vulnerabilities in BIND impact VIOS

IBM SECURITY ADVISORY First Issued: Fri Nov 18 08:19:36 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bindadvisory13.asc https://aix.software.ibm.com/aix/efixes/security/bindadvisory13.asc...

Vulnerability in lquerylv in LVM impacts AIX,Vulnerability in lquerylv in LVM impacts VIOS

IBM SECURITY ADVISORY First Issued: Mon Nov 7 10:35:13 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/lquerylvadvisory.asc https://aix.software.ibm.com/aix/efixes/security/lquerylvadvisory.asc...

Vulnerability in lsmcode affects AIX,Vulnerability in lsmcode affects VIOS

lsmcodeadvisory2.asc: Version 5 Version 5 Issued: Fri Nov 11 08:21:26 CST 2016 Version 5 Changes: iFixes for AIX 7100-04-02 and 7200-00-02 no longer require a reboot. IBM SECURITY ADVISORY First Issued: Mon Oct 17 08:54:26 CDT 2016 |Updated: Fri Nov 11 08:21:26 CST 2016 |Update: iFixes for AIX...

Vulnerabilities in NTP affect AIX,Vulnerabilities in NTP affect VIOS

ntpadvisory7.asc: Version 2 Version 2 Issued: Tue Sep 13 08:23:22 CDT 2016 Version 2 Changes: Changed the impacted upper level filesets listed for NTPv4. The new levels should match the prereqs as listed in the iFixes. IBM SECURITY ADVISORY First Issued: Tue Sep 6 09:07:16 CDT 2016 |Updated: Tue...

CVE-2016-0281

The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumboframes feature is not enabled, allows remote attackers to cause a denial of service FC1763 or FC5899 adapter crash via crafted packets...

CVE-2016-0266

IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via unspecified vectors...

Design/Logic Flaw

The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumboframes feature is not enabled, allows remote attackers to cause a denial of service FC1763 or FC5899 adapter crash via crafted packets...

Default credentials

IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via unspecified vectors...

CVE-2016-0266

IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via unspecified vectors...

CVE-2016-0281

The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumboframes feature is not enabled, allows remote attackers to cause a denial of service FC1763 or FC5899 adapter crash via crafted packets...

CVE-2016-0266

IBM AIX and VIOS are affected by CVE-2016-0266, where AIX 5.3, 6.1, 7.1, 7.2 and VIOS 2.2.x do not default to the latest TLS version, enabling MITM exposure to obtain sensitive information via unspecified vectors. The issue is linked to pconsole and related TLS handling, with CVSS base context sh...

Vulnerability in mustendd device driver impacts AIX,Vulnerability in mustendd device driver impacts VIOS

IBM SECURITY ADVISORY First Issued: Thu Jul 28 13:55:43 CDT 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/mustenddadvisory.asc https://aix.software.ibm.com/aix/efixes/security/mustenddadvisory.asc...

Vulnerabilities in MD5 Signature and Hash Algorithm and TLS 1.2 affects sendmail imap and pop3d on AIX,Vulnerabilities in MD5 Signature and Hash Algorithm and TLS 1.2 affects sendmail imap and pop3d on AIX,Vulnerabilities in MD5 Signature and Hash Algorithm and TLS 1.2 affects sendmail imap and pop3d on VIOS,Vulnerabilities in MD5 Signature and Hash Algorithm and TLS 1.2 affects sendmail imap pop3d ftp/ftpd and ndpd-host/ndpd-router on AIX

nettcpadvisory2.asc: Version 4 Version 4 Issued: Thu Oct 20 10:56:28 CDT 2016 Version 4 Changes: New iFixes provided for AIX 5.3.12.9, 6.1.9.5, 6.1.9.6, 7.1.3.5, and 7.1.3.6. For security reasons, it is highly recommended to install these new iFixes. Bulletin scope increased to include ftp/ftpd a...

Vulnerabilities in BIND affects AIX,Vulnerabilities in BIND affects VIOS,Vulnerability in BIND affects AIX

bindadvisory12.asc: Version 5 Version 5 Issued: Mon Dec 4 14:20:31 CST 2017 Version 5 Changes: APAR table updated to reflect both APARs where relevant. IBM SECURITY ADVISORY First Issued: Fri Jun 17 08:19:25 CDT 2016 |Updated: Mon Dec 4 14:20:31 CST 2017 |Update: APAR table updated to reflect bot...

Vulnerabilities in NTP affect AIX,Vulnerabilities in NTP affect VIOS

ntpadvisory6.asc: Version 6 Version 6 Issued: Tue Aug 16 11:41:45 CDT 2016 Version 6 Changes: Fix added for AIX 7.2.0.2 and is now included in the tar file, ntpfix6.tar. AIX 7.2.0.2 iFix for NTPv3: IV83995s2b.160713.epkg.Z IBM SECURITY ADVISORY First Issued: Wed Jun 8 13:17:48 CDT 2016 |Updated:...

Vulnerability in BIND affects AIX,Vulnerability in BIND affects VIOS

IBM SECURITY ADVISORY First Issued: Mon Apr 25 10:06:21 CDT 2016 |Updated: Wed Dec 6 10:17:27 CST 2017 |Update: Changed impacted fileset for AIX 7.2 from bos.net.tcp.client | to bos.net.tcp.bindutils. The most recent version of this document is available here:...

Vulnerabilities in OpenSSL affect AIX

IBM SECURITY ADVISORY First Issued: Wed Mar 2 08:43:07 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory17.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory17.asc...