The remote host is missing AIX PTF U807506, which is related to the security of the package bos.net.tcp.server.

The remote host is missing AIX PTF U807065, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U807064, which is related to the security of the package bos.net.uucp.

The remote host is missing AIX PTF U806006, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U806001, which is related to the security of the package bos.rte.install.

The remote host is missing AIX PTF U805069, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U805035, which is related to the security of the package bos.rte.install.

The remote host is missing AIX PTF U805031, which is related to the security of the package bos.rte.lvm.

The remote host is missing AIX PTF U804752, which is related to the security of the package bos.rte.console.

The remote host is missing AIX PTF U804573, which is related to the security of the package bos.rte.lvm.

The remote host is missing AIX PTF U804570, which is related to the security of the package devices.common.IBM.ib.rte.

The remote host is missing AIX PTF U804561, which is related to the security of the package bos.rte.shell.

The remote host is missing AIX PTF U804560, which is related to the security of the package bos.rte.methods.

The remote host is missing AIX PTF U804534, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U804478, which is related to the security of the package bos.rte.methods.

The remote host is missing AIX PTF U804476, which is related to the security of the package devices.common.IBM.ib.rte.

The remote host is missing AIX PTF U804407, which is related to the security of the package bos.mh.

The remote host is missing AIX PTF U804205, which is related to the security of the package bos.mh.

The remote host is missing AIX PTF U804030, which is related to the security of the package bos.rte.SRC.

The remote host is missing AIX PTF U803849, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U802811, which is related to the security of the package devices.chrp.base.diag.

The remote host is missing AIX PTF U802798, which is related to the security of the package bos.rte.shell.

The remote host is missing AIX PTF U802796, which is related to the security of the package printers.rte.

The remote host is missing AIX PTF U802795, which is related to the security of the package bos.acct.

The remote host is missing AIX PTF U802791, which is related to the security of the package bos.diag.util.

The remote host is missing AIX PTF U802761, which is related to the security of the package bos.rte.control.

The remote host is missing AIX PTF U802735, which is related to the security of the package bos.svprint.rte.

The remote host is missing AIX PTF U800640, which is related to the security of the package bos.rte.filesystem.

The remote host is missing AIX PTF U800638, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U800632, which is related to the security of the package bos.diag.rte.

The remote host is missing AIX PTF U800591, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U499696, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U497412, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U487052, which is related to the security of the package bos.rte.lvm.

The remote host is missing AIX PTF U477978, which is related to the security of the package bos.rte.console.

The remote host is missing AIX PTF U477911, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U477557, which is related to the security of the package bos.rte.SRC.

The remote host is missing AIX PTF U477539, which is related to the security of the package bos.diag.rte.

The remote host is missing AIX PTF U477521, which is related to the security of the package devices.chrp.base.rte.

The remote host is missing AIX PTF U477512, which is related to the security of the package bos.rte.filesystem.

The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp.

There is a buffer overflow vulnerability in the qosmod command. A locally authenticated attacker can exploit this vulnerability if they have they have been assigned the aix.network.config.no role-based access control authorization.

The successful exploitation of this vulnerability allows a local attacker to execute arbitrary code with the innate privileges of the qosmod command.

The following executable is vulnerable :

/usr/sbin/qosmod.

There is a buffer overflow vulnerability in the qoslist command. A locally authenticated attacker can exploit this vulnerability if they have they have been assigned the aix.network.status or aix.network.config.no role-based access control authorizations.

The successful exploitation of this vulnerability allows a local attacker to execute arbitrary code with the innate privileges of the qoslist command.

The following executable is vulnerable :

/usr/sbin/qoslist.

ID	Name	Severity
65296	AIX 5.3 TL 8 : bos.net.tcp.server (U807506)	high
65295	AIX 5.3 TL 5 / 5.3 TL 6 : bos.net.tcp.client (U807065)	high
65294	AIX 5.3 TL 5 / 5.3 TL 6 : bos.net.uucp (U807064)	medium
65293	AIX 5.2 TL 8 : bos.net.tcp.client (U806006)	high
65292	AIX 5.2 TL 8 / 5.2 TL 9 : bos.rte.install (U806001)	high
65291	AIX 5.3 TL 4 / 5.3 TL 5 : bos.net.tcp.client (U805069)	high
65290	AIX 5.3 TL 4 / 5.3 TL 5 : bos.rte.install (U805035)	low
65289	AIX 5.3 TL 4 / 5.3 TL 5 : bos.rte.lvm (U805031)	high
65288	AIX 5.3 TL 5 : bos.rte.console (U804752)	high
65287	AIX 5.3 TL 7 : bos.rte.lvm (U804573)	high
65286	AIX 5.3 TL 7 : devices.common.IBM.ib.rte (U804570)	high
65285	AIX 5.3 TL 7 : bos.rte.shell (U804561)	high
65284	AIX 5.3 TL 7 : bos.rte.methods (U804560)	high
65283	AIX 5.3 TL 7 : bos.net.tcp.client (U804534)	medium
65282	AIX 5.3 TL 6 : bos.rte.methods (U804478)	high
65281	AIX 5.3 TL 6 : devices.common.IBM.ib.rte (U804476)	high
65280	AIX 5.3 TL 4 : bos.mh (U804407)	critical
65279	AIX 5.2 TL 8 : bos.mh (U804205)	critical
65278	AIX 5.3 TL 4 : bos.rte.SRC (U804030)	high
65277	AIX 5.2 TL 10 : bos.net.tcp.client (U803849)	medium
65276	AIX 5.3 TL 8 : devices.chrp.base.diag (U802811)	high
65275	AIX 5.3 TL 8 : bos.rte.shell (U802798)	high
65274	AIX 5.3 TL 8 : printers.rte (U802796)	high
65273	AIX 5.3 TL 8 : bos.acct (U802795)	high
65272	AIX 5.3 TL 8 : bos.diag.util (U802791)	high
65271	AIX 5.3 TL 7 : bos.rte.control (U802761)	high
65270	AIX 5.3 TL 7 : bos.svprint.rte (U802735)	high
65269	AIX 5.3 TL 4 : bos.rte.filesystem (U800640)	high
65268	AIX 5.3 TL 4 : bos.net.tcp.client (U800638)	critical
65267	AIX 5.3 TL 4 : bos.diag.rte (U800632)	high
65266	AIX 5.3 TL 6 : bos.net.tcp.client (U800591)	medium
65265	AIX 5.2 TL 8 : bos.net.tcp.client (U499696)	critical
65264	AIX 5.3 TL 5 / 5.3 TL 4 : bos.net.tcp.client (U497412)	medium
65263	AIX 5.3 TL 5 : bos.rte.lvm (U487052)	high
65262	AIX 5.2 TL 9 : bos.rte.console (U477978)	high
65261	AIX 5.2 TL 9 / 5.2 TL 8 : bos.net.tcp.client (U477911)	medium
65260	AIX 5.2 TL 8 : bos.rte.SRC (U477557)	high
65259	AIX 5.2 TL 8 : bos.diag.rte (U477539)	high
65258	AIX 5.2 TL 7 / 5.2 TL 8 : devices.chrp.base.rte (U477521)	medium
65257	AIX 5.2 TL 8 : bos.rte.filesystem (U477512)	high
64510	AIX 7.1 TL 2 : ftp (IV30669)	medium
64509	AIX 6.1 TL 8 : ftp (IV28651)	medium
64360	AIX 6.1 TL 1 : qosmod (IZ71870)	high
64359	AIX 6.1 TL 1 : qoslist (IZ71869)	high
64358	AIX 6.1 TL 2 : qosmod (IZ71627)	high
64357	AIX 6.1 TL 2 : qoslist (IZ71590)	high
64356	AIX 6.1 TL 3 : qosmod (IZ71555)	high
64355	AIX 6.1 TL 3 : qoslist (IZ71554)	high
64354	AIX 6.1 TL 4 : qosmod (IZ68231)	high
64353	AIX 6.1 TL 4 : qoslist (IZ68194)	high

Detections

Analytics

AIX Local Security Checks Family for Nessus

high

high

medium

high

high

high

low

high

high

high

high

high

high

medium

high

high

critical

critical

high

medium

high

high

high

high

high

high

high

high

critical

high

medium

critical

medium

high

high

medium

high

high

medium

high

medium

medium

high

high

high

high

high

high

high

high