Network Time Protocol (NTP) Project NTP daemon (ntpd) is vulnerable to a denial of service, caused by an error when using symmetric key authentication. By sending specially-crafted packets to both peering hosts, an attacker could exploit this vulnerability to prevent synchronization.

The remote AIX host has a version of Network Time Protocol (NTP) installed that is affected by a denial of service vulnerability due to a flaw in the symmetric-key feature in the receive() function in file ntp_proto.c when receiving certain invalid packets, which causes state-variable updates to be performed. A man-in-the-middle attacker can exploit this, by spoofing the source IP of a peer, to cause a synchronization loss.

The TLS protocol could allow a remote attacker to obtain sensitive information, caused by the failure to properly convey a DHE_EXPORT ciphersuite choice. An attacker could exploit this vulnerability using man-in-the-middle techniques to force a downgrade to 512-bit export-grade cipher. Successful exploitation could allow an attacker to recover the session key as well as modify the contents of the traffic. This vulnerability is commonly referred to as 'Logjam'.

ISC BIND is vulnerable to a denial of service, caused by an error in the handling of TKEY queries. By sending specially-crafted packets, a remote attacker could exploit this vulnerability to cause a REQUIRE assertion failure.

The version of Java SDK installed on the remote AIX host is affected by multiple vulnerabilities :

  - Java Security Components store plaintext data in memory     dumps, which allows a local attacker to gain access to     sensitive information. (CVE-2015-1931)

  - A flaw exists in the readSerialData() function in     class ObjectInputStream.java when handling OIS data,     which allows an attacker to execute arbitrary code.
    (CVE-2015-2590)

  - Multiple flaws exist in the JCE component due to     various cryptographic operations using non-constant     time comparisons. A remote attacker can exploit this     to conduct timing attacks to gain access to sensitive     information. (CVE-2015-2601)

  - A flaw exists in the ECDH_Derive() function in file     ec.c due to missing EC parameter validation when     performing ECDH key derivation. A remote attacker can     exploit this to access sensitive information.
    (CVE-2015-2613)

  - An unspecified vulnerability exists in the 2D component     that allows a remote attacker to access sensitive     information. (CVE-2015-2619, CVE-2015-2637)

  - A flaw exists in the RMIConnectionImpl constructor     in class RMIConnectionImpl.java due to improper     permission checks when creating repository class     loaders. An attacker can exploit this to bypass sandbox     restrictions and access sensitive information.
    (CVE-2015-2621)

  - An unspecified flaw exists in the JSSE component when     handling the SSL/TLS protocol. A remote attacker can     exploit this to gain access to sensitive information.
    (CVE-2015-2625)

  - An integer overflow condition exists in the     International Components for Unicode for C/C++ (ICU4C).
    An attacker, using a specially crafted font, can exploit     this to crash an application using this library or     access memory contents. (CVE-2015-2632)

  - A unspecified vulnerability exists in the 2D component     that allows a remote attacker to execute arbitrary     code. (CVE-2015-2638)

  - An unspecified flaw exists in the Deployment component     that allows a local attacker to gain elevated     privileges. (CVE-2015-2664)

  - A man-in-the-middle vulnerability, known as Logjam,     exists due to a flaw in the SSL/TLS protocol. A remote     attacker can exploit this flaw to downgrade connections     using ephemeral Diffie-Hellman key exchange to 512-bit     export-grade cryptography. (CVE-2015-4000)

  - An unspecified vulnerability exists in the Deployment     component that impacts confidentiality and integrity.
    (CVE-2015-4729)

  - A flaw exists in class MBeanServerInvocationHandler.java     when handling MBean connection proxy classes. An     attacker can exploit this to bypass sandbox restrictions     and execute arbitrary code. (CVE-2015-4731)

  - Multiple flaws exist in classes ObjectInputStream.java     and SerialCallbackContext.java related to insufficient     context checking. An attacker can exploit these to     execute arbitrary code. (CVE-2015-4732)

  - A flaw exists in the invoke() method in the class     RemoteObjectInvocationHandler.java due to calls to the     finalize() method being permitted. An attacker can     exploit this to bypass sandbox protections and execute     arbitrary code. (CVE-2015-4733)

  - An unspecified flaw exists in the Deployment component     that allows a local attacker to execute arbitrary code.
    (CVE-2015-4736)

  - A flaw exists in the Security component when handling     Online Certificate Status Protocol (OCSP) responses with     no 'nextUpdate'. A remote attacker can exploit this to     cause an application to accept a revoked X.509     certificate. (CVE-2015-4748)

  - An flaw exists in the query() method in class     DnsClient.java due to a failure by the JNDI component's     exception handling to release request information. A     remote attacker can exploit this to cause a denial of     service. (CVE-2015-4749)

  - An integer overflow condition exists in the layout     engine in the International Components for Unicode for     C/C++ (ICU4C). An attacker, using a specially crafted     font, can exploit this to crash an application using     this library or execute arbitrary code. (CVE-2015-4760)

The version of OpenSSL installed on the remote AIX host is affected by multiple vulnerabilities :

  - An invalid free memory error exists due to improper     validation of user-supplied input when a DTLS peer     receives application data between ChangeCipherSpec and     Finished messages. A remote attacker can exploit this to     corrupt memory, resulting in a denial of service or     the execution of arbitrary code. (CVE-2014-8176)

  - A denial of service vulnerability exists when processing     an ECParameters structure due to an infinite loop that     occurs when a specified curve is over a malformed binary     polynomial field. A remote attacker can exploit this to     perform a denial of service against any system that     processes public keys, certificate requests, or     certificates. This includes TLS clients and TLS servers     with client authentication enabled. (CVE-2015-1788)

  - A denial of service vulnerability exists due to improper     validation of the content and length of the ASN1_TIME     string by the X509_cmp_time() function. A remote     attacker can exploit this, via a malformed certificate     and CRLs of various sizes, to cause a segmentation     fault, resulting in a denial of service condition. TLS     clients that verify CRLs are affected. TLS clients and     servers with client authentication enabled may be     affected if they use custom verification callbacks.
    (CVE-2015-1789)

  - A NULL pointer dereference flaw exists in the PKCS#7     parsing code due to incorrect handling of missing inner     'EncryptedContent'. This allows a remote attacker, via     specially crafted ASN.1-encoded PKCS#7 blobs with     missing content, to cause a denial of service condition     or other potential unspecified impacts. (CVE-2015-1790)

  - A double-free error exists due to a race condition that     occurs when a NewSessionTicket is received by a     multi-threaded client when attempting to reuse a     previous ticket. (CVE-2015-1791)

  - A denial of service vulnerability exists in the CMS code     due to an infinite loop that occurs when verifying a     signedData message. A remote attacker can exploit this     to cause a denial of service condition. (CVE-2015-1792)

  - A man-in-the-middle vulnerability, known as Logjam,     exists due to a flaw in the SSL/TLS protocol. A remote     attacker can exploit this flaw to downgrade connections     using ephemeral Diffie-Hellman key exchange to 512-bit     export-grade cryptography. (CVE-2015-4000)

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9297 Network Time Protocol (NTP) Project NTP daemon (ntpd) could allow a remote attacker to conduct spoofing attacks, caused by insufficient entropy in PRNG. An attacker could exploit this vulnerability to spoof the IPv6 address ::1 to bypass ACLs and launch further attacks on the system. Network Time Protocol (NTP) Project NTP daemon (ntpd) is vulnerable to a denial of service, caused by an error when using symmetric key authentication. By sending specially-crafted packets to both peering hosts, an attacker could exploit this vulnerability to prevent synchronization.

A man-in-the-middle (MitM) information disclosure vulnerability, known as POODLE, exists due to the way SSL 3.0 handles padding bytes when decrypting messages encrypted using block ciphers in cipher block chaining (CBC) mode. A MitM attacker can decrypt a selected byte of a cipher text in as few as 256 tries if they are able to force a victim application to repeatedly send the same data over newly created SSL 3.0 connections.

The version of Java SDK installed on the remote AIX host is affected by multiple vulnerabilities :

  - The Global Security Kit (GSKit) contains a flaw due to     improper restrictions of TLS state transitions. A     man-in-the-middle attacker can exploit this to downgrade     the security of a session to use EXPORT_RSA ciphers.
    This allows the attacker to more easily break the     encryption and monitor or tamper with the encrypted     stream. (CVE-2015-0138)

  - An unspecified flaw exists that allows an attacker to     execute code running under a security manager with     elevated privileges.(CVE-2015-0192)

  - A security feature bypass vulnerability, known as FREAK     (Factoring attack on RSA-EXPORT Keys), exists due to the     support of weak EXPORT_RSA cipher suites with keys less     than or equal to 512 bits. A man-in-the-middle attacker     may be able to downgrade the SSL/TLS connection to use     EXPORT_RSA cipher suites which can be factored in a     short amount of time, allowing the attacker to intercept     and decrypt the traffic. (CVE-2015-0204)

  - Multiple unspecified vulnerabilities exist in multiple     Java subcomponents including 2D, Beans, Deployment, JCE,     JSSE, and tools. (CVE-2015-0458, CVE-2015-0459,     CVE-2015-0469, CVE-2015-0477, CVE-2015-0478,     CVE-2015-0480, CVE-2015-0486, CVE-2015-0488,     CVE-2015-0491)

  - An unspecified flaw exists that allows a remote attacker     to bypass permission checks and gain access to sensitive     information. (CVE-2015-1914)

  - An unspecified flaw exists due to the Socket Extension     Provider's handling of TLS and SSL connections. A remote     attacker can exploit this to cause a denial of service.
    (CVE-2015-1916)

  - A security feature bypass vulnerability exists, known as     Bar Mitzvah, due to improper combination of state data     with key data by the RC4 cipher algorithm during the     initialization phase. A man-in-the-middle attacker can     exploit this, via a brute-force attack using LSB values,     to decrypt the traffic. (CVE-2015-2808)

The remote host is missing AIX PTF U865862, which is related to the security of the package bos.rte.lvm.

The running of lquerylv command with variable DBGCMD_LQUERYLV set may allow a local user to gain root privileges.

The remote host is missing AIX PTF U865854, which is related to the security of the package bos.rte.lvm.

The running of lquerylv command with variable DBGCMD_LQUERYLV set may allow a local user to gain root privileges.

The version of the Network Authentication Service (NAS) installed on the remote AIX host is affected by the following vulnerabilities related to Kerberos 5 :

  - Denial of service and remote code execution     vulnerabilities exist due to security context handles     not being properly maintained, allowing an     authenticated, remote attacker to crash the service or     execute arbitrary code using crafted GSSAPI traffic.
    (CVE-2014-5352)

  - A denial of service vulnerability exists due to improper     handling of zero-byte or unterminated strings.
    (CVE-2014-5355)

  - Denial of service and remote code execution     vulnerabilities exist which allow an authenticated,     remote attacker to crash the service or execute     arbitrary code using crafted, malformed XDR data.
    (CVE-2014-9421)

  - A privilege escalation vulnerability exists that allows     an authenticated, remote attacker to gain administrative     access via a flaw in kadmin authorization checks.
    (CVE-2014-9422)

  - An information disclosure vulnerability allows an     attacker to gain information about process heap memory     from NAS packets. (CVE-2014-9423)

The version of Java SDK installed on the remote host is affected by multiple vulnerabilities :

  - A man-in-the-middle information disclosure vulnerability     exists due to a TLS security downgrade flaw. A     man-in-the-middle attacker may be able to downgrade the     SSL/TLS connection to use EXPORT_RSA cipher suites which     can be factored in a short amount of time, allowing the     attacker to intercept and decrypt the traffic.
    (CVE-2015-0138)

  - A flaw exists in the RC4 algorithm implementation due to     improper combination of state data with key data during     the initialization phase. A man-in-the-middle attacker     can exploit this to conduct plaintext-recovery attacks.
    (CVE-2015-2808)

The version of OpenSSL installed on the remote AIX host is affected by the following vulnerabilities :

  - A use-after-free condition exists in the     d2i_ECPrivateKey() function due to improper processing     of malformed EC private key files during import. A     remote attacker can exploit this to dereference or free     already freed memory, resulting in a denial of service     or other unspecified impact. (CVE-2015-0209)

  - An invalid read flaw exists in the ASN1_TYPE_cmp()     function due to improperly performed boolean-type     comparisons. A remote attacker can exploit this, via a     crafted X.509 certificate to an endpoint that uses the     certificate-verification feature, to cause an invalid     read operation, resulting in a denial of service.
    (CVE-2015-0286)

  - A flaw exists in the ASN1_item_ex_d2i() function due to     a failure to reinitialize 'CHOICE' and 'ADB' data     structures when reusing a structure in ASN.1 parsing.
    This allows a remote attacker to cause an invalid write     operation and memory corruption, resulting in a denial     of service. (CVE-2015-0287)

  - A NULL pointer dereference flaw exists in the     X509_to_X509_REQ() function due to improper processing     of certificate keys. This allows a remote attacker, via     a crafted X.509 certificate, to cause a denial of     service. (CVE-2015-0288)

  - A NULL pointer dereference flaw exists in the PKCS#7     parsing code due to incorrect handling of missing outer     ContentInfo. This allows a remote attacker, using an     application that processes arbitrary PKCS#7 data and     providing malformed data with ASN.1 encoding, to cause     a denial of service. (CVE-2015-0289)

  - An integer underflow condition exists in the     EVP_DecodeUpdate() function due to improper validation     of base64 encoded input when decoding. This allows a     remote attacker, using maliciously crafted base64 data,     to cause a segmentation fault or memory corruption,     resulting in a denial of service or possibly the     execution of arbitrary code. (CVE-2015-0292)

  - A flaw exists in servers that both support SSLv2 and     enable export cipher suites due to improper     implementation of SSLv2. A remote attacker can exploit     this, via a crafted CLIENT-MASTER-KEY message, to cause     a denial of service. (CVE-2015-0293)

CVE-2014-8769 tcpdump is vulnerable to a denial of service, caused by the improper handling of input by the application decoder for the Ad hoc On-Demand Distance Vector (AODV) protocol. By sending specially-crafted data, a remote attacker could exploit this vulnerability to cause the application to crash.

Please see following for more information :

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8769

CVE-2014-8500 ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals. 

Please see following for more information :

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8500

The version of Java SDK installed on the remote host is affected by the following vulnerabilities :

  - A man-in-the-middle (MitM) information disclosure     vulnerability known as POODLE. The vulnerability is due     to the way SSL 3.0 handles padding bytes when decrypting     messages encrypted using block ciphers in cipher block     chaining (CBC) mode. MitM attackers can decrypt a     selected byte of a cipher text in as few as 256 tries if     they are able to force a victim application to     repeatedly send the same data over newly created SSL 3.0     connections. (CVE-2014-3566)

  - Information disclosure flaws exist in the font parsing     code in the 2D component in OpenJDK. A specially crafted     font file can exploit boundary check flaws and allow an     untrusted Java applet or application to disclose     portions of the Java Virtual Machine memory.
    (CVE-2014-6585, CVE-2014-6591)

  - A NULL pointer dereference flaw exists in the     MulticastSocket implementation in the Libraries     component of OpenJDK. An untrusted Java applet or     application can use this flaw to bypass certain     Java sandbox restrictions. (CVE-2014-6587)

  - The SSL/TLS implementation in the JSSE component in     OpenJDK fails to properly check whether the     ChangeCipherSpec was received during a SSL/TLS     connection handshake. An MitM attacker can use this     flaw to force a connection to be established without     encryption being enabled. (CVE-2014-6593)

  - An unspecified privilege escalation vulnerability exists     in IBM Java Virtual Machine. (CVE-2014-8891)

  - An unspecified information disclosure vulnerability     exists in the Libraries component of Oracle Java SE.
    (CVE-2015-0400)

  - An unspecified information disclosure vulnerability     exists in the Deployment component of Oracle Java SE.
    (CVE-2015-0403)

  - Unspecified denial of service and information     disclosure vulnerabilities exist in the Deployment     component of Oracle Java SE. (CVE-2015-0406)

  - An information disclosure vulnerability exists in the     Swing component in OpenJDK. An untrusted Java applet or     application can use this flaw to bypass certain Java     sandbox restrictions. (CVE-2015-0407)

  - Multiple improper permission check vulnerabilities exist     in the JAX-WS, Libraries, and RMI components in OpenJDK.
    An untrusted Java applet or application can use these     flaws to bypass Java sandbox restrictions.
    (CVE-2015-0412, CVE-2014-6549, CVE-2015-0408)

  - A denial of service vulnerability exists in the DER     (Distinguished Encoding Rules) decoder in the Security     component in OpenJDK when handling negative length     values. A specially crafted, DER-encoded input can cause     a Java application to enter an infinite loop when     decoded. (CVE-2015-0410)

The version of OpenSSL installed on the remote AIX host is affected by the following vulnerabilities :

  - The BIGNUM squaring (BN_sqr) implementation does not     properly calculate the square of a BIGNUM value. This     allows remote attackers to defeat cryptographic     protection mechanisms. (CVE-2014-3570)

  - A NULL pointer dereference flaw exists in the     dtls1_get_record() function when handling DTLS messages.
    A remote attacker, using a specially crafted DTLS     message, can cause a denial of service. (CVE-2014-3571)

  - A flaw exists with ECDH handshakes when using an ECDSA     certificate without a ServerKeyExchange message. This     allows a remote attacker to trigger a loss of forward     secrecy from the ciphersuite. (CVE-2014-3572)

  - A flaw exists when accepting non-DER variations of     certificate signature algorithms and signature encodings     due to a lack of enforcement of matches between signed     and unsigned portions. A remote attacker, by including     crafted data within a certificate's unsigned portion,     can bypass fingerprint-based certificate-blacklist     protection mechanisms. (CVE-2014-8275)

  - A security feature bypass vulnerability, known as FREAK     (Factoring attack on RSA-EXPORT Keys), exists due to the     support of weak EXPORT_RSA cipher suites with keys less     than or equal to 512 bits. A man-in-the-middle attacker     may be able to downgrade the SSL/TLS connection to use     EXPORT_RSA cipher suites which can be factored in a     short amount of time, allowing the attacker to intercept     and decrypt the traffic. (CVE-2015-0204)

  - A flaw exists when accepting DH certificates for client     authentication without the CertificateVerify message.
    This allows a remote attacker to authenticate to the     service without a private key. (CVE-2015-0205)

  - A memory leak occurs in dtls1_buffer_record when     handling a saturation of DTLS records containing the     same number sequence but for the next epoch. This allows     a remote attacker to cause a denial of service.
    (CVE-2015-0206)

The version of NTP installed on the remote AIX host is affected by the following vulnerabilities :

  - A security weakness exists due to the config_auth()     function improperly generating default keys when no     authentication key is defined in the ntp.conf file.
    Key size is limited to 31 bits and the insecure     ntp_random() function is used, resulting in     cryptographically-weak keys with insufficient entropy. A     remote attacker can exploit this to defeat cryptographic     protection mechanisms via a brute-force attack.
    (CVE-2014-9293)

  - A security weakness exists due the use of a weak seed to     prepare a random number generator used to generate     symmetric keys. This allows a remote attacker to defeat     cryptographic protection mechanisms via a brute-force     attack. (CVE-2014-9294)

  - Multiple stack-based buffer overflow conditions exist     due to improper validation of user-supplied input when     handling packets in the crypto_recv(), ctl_putdata(),     and configure() functions when using autokey     authentication. A remote attacker can exploit this, via     a specially crafted packet, to cause a denial of service     condition or the execution of arbitrary code.
    (CVE-2014-9295)

CVE-2014-9293 If no authentication key is defined in the ntp.conf file, a cryptographically-weak default key is generated.

CVE-2014-9294 ntp-keygen before 4.2.7p230 uses a non-cryptographic random number generator with a weak seed to generate symmetric keys.

CVE-2014-9295 A remote unauthenticated attacker may craft special packets that trigger buffer overflow.

ID	Name	Severity
85605	AIX 7.1 TL 2 : ntp (IV74262)	Medium
85604	AIX 7.1 TL 3 : ntp (IV74261)	Medium
85603	AIX 6.1 TL 9 : ntp (IV73783)	Medium
85515	AIX 5.3 TL 12 : sendmail (IV75967) (Logjam)	Medium
85450	AIX 5.3 TL 12 : bind9 (IV75966)	High
85447	AIX Java Advisory : java_july2015_advisory.asc (Logjam)	Critical
85417	AIX 6.1 TL 8 : bind9 (IV75694)	High
85416	AIX 7.1 TL 3 : bind9 (IV75693)	High
85415	AIX 6.1 TL 9 : bind9 (IV75692)	High
85414	AIX 7.1 TL 2 : bind9 (IV75690)	High
85304	AIX 7.1 TL 3 : sendmail (IV75646) (Logjam)	Medium
85303	AIX 7.1 TL 2 : sendmail (IV75645) (Logjam)	Medium
85302	AIX 6.1 TL 8 : sendmail (IV75644) (Logjam)	Medium
85301	AIX 6.1 TL 9 : sendmail (IV75643) (Logjam)	Medium
84880	AIX OpenSSL Advisory : openssl_advisory14.asc (Logjam)	High
84493	AIX 7.1 TL 0 : ntp4 (IV71096)	Medium
84492	AIX 6.1 TL 6 : ntp4 (IV71094)	Medium
84275	AIX 6.1 TL 9 : nettcp (IV73976) (POODLE)	Medium
84274	AIX 7.1 TL 3 : nettcp (IV73975) (POODLE)	Medium
84273	AIX 7.1 TL 2 : nettcp (IV73974) (POODLE)	Medium
84272	AIX 6.1 TL 8 : nettcp (IV73973) (POODLE)	Medium
84271	AIX 7.1 TL 3 : nettcp (IV73419) (POODLE)	Medium
84270	AIX 7.1 TL 2 : nettcp (IV73418) (POODLE)	Medium
84269	AIX 6.1 TL 9 : nettcp (IV73417) (POODLE)	Medium
84268	AIX 6.1 TL 8 : nettcp (IV73416) (POODLE)	Medium
84267	AIX 6.1 TL 9 : nettcp (IV73324) (POODLE)	Medium
84266	AIX 7.1 TL 2 : nettcp (IV73319) (POODLE)	Medium
84265	AIX 7.1 TL 3 : nettcp (IV73316) (POODLE)	Medium
84264	AIX 6.1 TL 8 : nettcp (IV69768) (POODLE)	Medium
84087	AIX Java Advisory : java_april2015_advisory.asc (Bar Mitzvah) (FREAK)	Critical
83879	AIX 6.1 TL 9 : bos.rte.lvm (U865862)	High
83878	AIX 7.1 TL 3 : bos.rte.lvm (U865854)	High
83874	AIX NAS Advisory : nas_advisory3.asc	High
83135	AIX Java Advisory : Multiple Vulnerabilities (Bar Mitzvah)	Medium
82900	AIX OpenSSL Advisory : openssl_advisory13.asc	High
81923	AIX 6.1 TL 9 : tcpdump (IV68992)	Medium
81922	AIX 7.1 TL 2 : tcpdump (IV68951)	Medium
81921	AIX 6.1 TL 8 : tcpdump (IV68950)	Medium
81920	AIX 7.1 TL 3 : tcpdump (IV67588)	Medium
81502	AIX 5.3 TL 12 : bind9 (IV68997)	High
81501	AIX 7.1 TL 3 : bind9 (IV68996)	High
81500	AIX 7.1 TL 2 : bind9 (IV68995)	High
81499	AIX 6.1 TL 9 : bind9 (IV68994)	High
81498	AIX 6.1 TL 8 : bind9 (IV68993)	High
81491	AIX Java Advisory : java_feb2015_advisory.asc (POODLE)	Critical
81406	AIX OpenSSL Advisory : openssl_advisory12.asc (FREAK)	Medium
81275	AIX 7.1 TL 3 : ntp (IV68430)	High
81274	AIX 7.1 TL 2 : ntp (IV68429)	High
81273	AIX 6.1 TL 9 : ntp (IV68428)	High
81272	AIX 5.3 TL 12 : ntp (IV68427)	High

AIX Local Security Checks Family for Nessus