IBM AIX's Unix domain (AIX 7.2, 7.3, VIOS 3.1, and VIOS 4.1) datagram socket implementation could potentially expose applications using Unix domain datagram sockets with SO_PEERID operation and may lead to privilege escalation. IBM X-Force ID: 284903.

The version of AIX installed on the remote host is prior to APAR IJ50910. It is, therefore, affected by a vulnerability as referenced in the IJ50910 advisory.

  - IBM AIX's Unix domain (AIX 7.2, 7.3, VIOS 3.1, and VIOS 4.1) datagram socket implementation could     potentially expose applications using Unix domain datagram sockets with SO_PEERID operation and may lead     to privilege escalation. IBM X-Force ID: 284903. (CVE-2024-27273)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ50936. It is, therefore, affected by a vulnerability as referenced in the IJ50936 advisory.

  - IBM AIX's Unix domain (AIX 7.2, 7.3, VIOS 3.1, and VIOS 4.1) datagram socket implementation could     potentially expose applications using Unix domain datagram sockets with SO_PEERID operation and may lead     to privilege escalation. IBM X-Force ID: 284903. (CVE-2024-27273)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ50935. It is, therefore, affected by a vulnerability as referenced in the IJ50935 advisory.

  - IBM AIX's Unix domain (AIX 7.2, 7.3, VIOS 3.1, and VIOS 4.1) datagram socket implementation could     potentially expose applications using Unix domain datagram sockets with SO_PEERID operation and may lead     to privilege escalation. IBM X-Force ID: 284903. (CVE-2024-27273)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ50934. It is, therefore, affected by a vulnerability as referenced in the IJ50934 advisory.

  - IBM AIX's Unix domain (AIX 7.2, 7.3, VIOS 3.1, and VIOS 4.1) datagram socket implementation could     potentially expose applications using Unix domain datagram sockets with SO_PEERID operation and may lead     to privilege escalation. IBM X-Force ID: 284903. (CVE-2024-27273)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
195313	AIX (IJ50910)	Nessus	AIX Local Security Checks	high
195311	AIX (IJ50936)	Nessus	AIX Local Security Checks	high
195309	AIX (IJ50935)	Nessus	AIX Local Security Checks	high
195306	AIX (IJ50934)	Nessus	AIX Local Security Checks	high

Detections

Analytics

CVE-2024-27273

high

Tenable Plugins

high

high

high

high