Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority.

A non-root user can read and overwrite files owned by others including root via tftp client.

If an AIX machine has IPv6 address configured, and if a malformed IPv6 packet in a specific format is sent to that machine, the machine can hang while processing that packet. The problem can happen only if an IPv6 address is configured on any of the network interfaces.

The remote host is missing AIX PTF U857842, which is related to the security of the package bos.net.tcp.server.

If specific combinations of RDATA are loaded into a nameserver, either via cache or an authoritative zone, a subsequent query for a related record will cause named to lock up.

The remote host is missing AIX PTF U855824, which is related to the security of the package bos.net.tcp.server.

If specific combinations of RDATA are loaded into a nameserver, either via cache or an authoritative zone, a subsequent query for a related record will cause named to lock up.

The remote host is missing AIX PTF U854884, which is related to the security of the package bos.mp64.

The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp.

The remote host is missing AIX PTF U854868, which is related to the security of the package bos.rte.filesystem.

IBM AIX is vulnerable to a denial of service, caused by improper restrictions on the fuser command. A local attacker could exploit this vulnerability via the -k argument to kill a process of another user.

The remote host is missing AIX PTF U854841, which is related to the security of the package bos.rte.filesystem.

IBM AIX is vulnerable to a denial of service, caused by improper restrictions on the fuser command. A local attacker could exploit this vulnerability via the -k argument to kill a process of another user.

The remote host is missing AIX PTF U854839, which is related to the security of the package bos.mp64.

The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp.

The remote host is missing AIX PTF U857181, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U852816, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U855520, which is related to the security of the package bos.rte.filesystem.

IBM AIX is vulnerable to a denial of service, caused by improper restrictions on the fuser command. A local attacker could exploit this vulnerability via the -k argument to kill a process of another user.

The remote host is missing AIX PTF U854751, which is related to the security of the package bos.mp64.

The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp.

The remote host is missing AIX PTF U854732, which is related to the security of the package bos.net.tcp.server.

If specific combinations of RDATA are loaded into a nameserver, either via cache or an authoritative zone, a subsequent query for a related record will cause named to lock up.

The remote host is missing AIX PTF U854646, which is related to the security of the package bos.net.tcp.server.

If specific combinations of RDATA are loaded into a nameserver, either via cache or an authoritative zone, a subsequent query for a related record will cause named to lock up.

The remote host is missing AIX PTF U854618, which is related to the security of the package bos.mp64.

The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp.

The remote host is missing AIX PTF U854603, which is related to the security of the package bos.rte.filesystem.

IBM AIX is vulnerable to a denial of service, caused by improper restrictions on the fuser command. A local attacker could exploit this vulnerability via the -k argument to kill a process of another user.

The remote host is missing AIX PTF U854458, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U852395, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U846336, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U846293, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U842593, which is related to the security of the package bos.mp64.

Some WPAR specific system calls may cause undefined behavior, possibly resulting in a denial of service.

The remote host is missing AIX PTF U820270, which is related to the security of the package bos.rte.shell.

The remote host is missing AIX PTF U814107, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U812052, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U852829, which is related to the security of the package bos.rte.security.

AIX could allow a local attacker to gain elevated privileges on the system, caused by an error in the getpwnam() function when customer extended LDAP user filtering is configured. A local attacker could exploit this vulnerability to gain lateral or elevated privileges on the system.

The remote host is missing AIX PTF U852280, which is related to the security of the package bos.net.tcp.client.

AIX system set up with stock sendmail will run arbitrary code through a users .forward. This apples to sendmail_ssl and sendmail_nossl.

The remote host is missing AIX PTF U851306, which is related to the security of the package X11.base.rte.

The remote host is missing AIX PTF U850723, which is related to the security of the package bos.rte.odm.

AIX could allow a arbitrary file overwrite symlink vulnerability due to libodm.a bug.

The remote host is missing AIX PTF U850143, which is related to the security of the package bos.rte.odm.

AIX could allow a arbitrary file overwrite symlink vulnerability due to libodm.a bug.

The remote host is missing AIX PTF U849929, which is related to the security of the package X11.base.rte.

The remote host is missing AIX PTF U849869, which is related to the security of the package X11.base.rte.

The remote host is missing AIX PTF U849827, which is related to the security of the package bos.rte.security.

AIX could allow a local attacker to gain elevated privileges on the system, caused by an error in the getpwnam() function when customer extended LDAP user filtering is configured. A local attacker could exploit this vulnerability to gain lateral or elevated privileges on the system.

The remote host is missing AIX PTF U849820, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U849807, which is related to the security of the package X11.base.rte.

The remote host is missing AIX PTF U849655, which is related to the security of the package X11.base.smt.

The remote host is missing AIX PTF U849604, which is related to the security of the package X11.base.rte.

The remote host is missing AIX PTF U849492, which is related to the security of the package devices.pciex.b3154a63.rte.

The remote host is missing AIX PTF U849393, which is related to the security of the package X11.base.rte.

The remote host is missing AIX PTF U849131, which is related to the security of the package bos.mp64.

Some WPAR specific system calls may cause undefined behavior, possibly resulting in a denial of service.

ID	Name	Severity
68964	AIX 7.1 TL 2 : infiniband (IV43561)	high
67182	AIX 7.1 TL 2 : tftp (IV42935)	high
67181	AIX 7.1 TL 0 : tftp (IV42934)	high
67180	AIX 6.1 TL 8 : tftp (IV42933)	high
67179	AIX 6.1 TL 7 : tftp (IV42932)	high
67178	AIX 7.1 TL 1 : tftp (IV42700)	high
67177	AIX 6.1 TL 6 : tftp (IV40221)	high
66790	AIX 7.1 TL 0 : inet (IV42264)	high
66789	AIX 7.1 TL 1 : inet (IV42229)	high
66788	AIX 6.1 TL 8 : inet (IV42124)	high
66787	AIX 7.1 TL 2 : inet (IV42095)	high
66786	AIX 6.1 TL 7 : inet (IV42072)	high
66785	AIX 6.1 TL 6 : inet (IV37925)	high
66280	AIX 7.1 : bos.net.tcp.server (U857842)	high
66279	AIX 7.1 TL 1 : bos.net.tcp.server (U855824)	high
66278	AIX 7.1 TL 1 : bos.mp64 (U854884)	medium
66277	AIX 7.1 TL 1 : bos.rte.filesystem (U854868)	low
66276	AIX 7.1 : bos.rte.filesystem (U854841)	low
66275	AIX 7.1 : bos.mp64 (U854839)	medium
65919	AIX 7.1 TL 1 : bos.net.tcp.client (U857181)	high
65918	AIX 7.1 : bos.net.tcp.client (U852816)	high
65712	AIX 6.1 TL 6 : bos.rte.filesystem (U855520)	low
65711	AIX 6.1 TL 6 : bos.mp64 (U854751)	medium
65710	AIX 6.1 TL 6 : bos.net.tcp.server (U854732)	high
65709	AIX 6.1 TL 7 : bos.net.tcp.server (U854646)	high
65708	AIX 6.1 TL 7 : bos.mp64 (U854618)	medium
65707	AIX 6.1 TL 7 : bos.rte.filesystem (U854603)	low
65529	AIX 6.1 TL 6 : bos.net.tcp.client (U854458)	high
65527	AIX 6.1 TL 7 : bos.net.tcp.client (U852395)	high
65501	AIX 7.1 TL 2 : bos.net.tcp.client (U846336)	high
65495	AIX 6.1 TL 8 : bos.net.tcp.client (U846293)	high
65477	AIX 6.1 TL 5 : bos.mp64 (U842593)	medium
65420	AIX 5.3 TL 11 : bos.rte.shell (U820270)	high
65359	AIX 6.1 TL 2 : bos.net.tcp.client (U814107)	medium
65333	AIX 5.2 TL 10 : bos.net.tcp.client (U812052)	high
65528	AIX 7.1 : bos.rte.security (U852829)	high
65526	AIX 7.1 TL 1 : bos.net.tcp.client (U852280)	high
65525	AIX 6.1 TL 5 : X11.base.rte (U851306)	high
65524	AIX 7.1 : bos.rte.odm (U850723)	medium
65523	AIX 6.1 TL 6 : bos.rte.odm (U850143)	medium
65522	AIX 6.1 TL 6 : X11.base.rte (U849929)	high
65521	AIX 6.1 TL 6 : X11.base.rte (U849869)	high
65520	AIX 6.1 TL 5 : bos.rte.security (U849827)	high
65519	AIX 6.1 TL 5 : bos.net.tcp.client (U849820)	high
65518	AIX 6.1 TL 5 : X11.base.rte (U849807)	high
65517	AIX 7.1 TL 2 : X11.base.smt (U849655)	high
65516	AIX 7.1 TL 2 : X11.base.rte (U849604)	high
65515	AIX 7.1 TL 1 : devices.pciex.b3154a63.rte (U849492)	high
65514	AIX 7.1 : X11.base.rte (U849393)	high
65513	AIX 6.1 TL 6 : bos.mp64 (U849131)	high

Detections

Analytics

AIX Local Security Checks Family for Nessus

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

medium

low

low

medium

high

high

low

medium

high

high

medium

low

high

high

high

high

medium

high

medium

high

high

high

high

medium

medium

high

high

high

high

high

high

high

high

high

high