Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.

The remote host is missing AIX PTF U855334, which is related to the security of the package bos.net.tcp.server.

The remote host is missing AIX PTF U855283, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U854672, which is related to the security of the package bos.mp64.

The remote host is missing AIX PTF U854553, which is related to the security of the package bos.rte.methods.

The remote host is missing AIX PTF U854544, which is related to the security of the package bos.rte.filesystem.

The remote host is missing AIX PTF U854542, which is related to the security of the package devices.common.IBM.ib.rte.

Printer commands mkque and mkquedev are susceptible to buffer overflow by users belonging to the 'printq' group. These commands are owned by 'root' and SUID bit set. The group is set to 'printq'. By default, no users are belong to the 'printq'.

An unspecified vulnerability in the IBM PowerHA Cluster Management monitoring of port 6177 could allow a remote attacker to make unauthorized changes the remote host's AIX configuration.

The remote host is missing AIX PTF U859167, which is related to the security of the package devices.common.IBM.ib.rte.

Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority.

The remote host is missing AIX PTF U857768, which is related to the security of the package bos.perf.perfstat.

The remote host is missing AIX PTF U857762, which is related to the security of the package devices.common.IBM.ib.rte.

Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority.

The remote host is missing AIX PTF U857748, which is related to the security of the package bos.net.tcp.client.

If an AIX machine has IPv6 address configured, and if a malformed IPv6 packet in a specific format is sent to that machine, the machine can hang while processing that packet. The problem can happen only if an IPv6 address is configured on any of the network interfaces.

The remote host is missing AIX PTF U857721, which is related to the security of the package bos.net.tcp.client.

If an AIX machine has IPv6 address configured, and if a malformed IPv6 packet in a specific format is sent to that machine, the machine can hang while processing that packet. The problem can happen only if an IPv6 address is configured on any of the network interfaces.

The remote host is missing AIX PTF U858372, which is related to the security of the package bos.perf.perfstat.

The remote host is missing AIX PTF U858349, which is related to the security of the package devices.common.IBM.ib.rte.

Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority.

The remote host is missing AIX PTF U858320, which is related to the security of the package bos.net.tcp.client.

AIX system set up with stock sendmail will run arbitrary code through a users .forward. This apples to sendmail_ssl and sendmail_nossl.

The remote host is missing AIX PTF U857885, which is related to the security of the package bos.mp64.

The remote host is missing AIX PTF U855867, which is related to the security of the package devices.common.IBM.ib.rte.

Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority.

The remote host is missing AIX PTF U857552, which is related to the security of the package devices.common.IBM.ib.rte.

Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority.

The remote host is missing AIX PTF U855978, which is related to the security of the package devices.common.IBM.ib.rte.

Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority.

The remote host is missing AIX PTF U855964, which is related to the security of the package bos.net.tcp.client.

If an AIX machine has IPv6 address configured, and if a malformed IPv6 packet in a specific format is sent to that machine, the machine can hang while processing that packet. The problem can happen only if an IPv6 address is configured on any of the network interfaces.

Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority.

A non-root user can read and overwrite files owned by others including root via tftp client.

If an AIX machine has IPv6 address configured, and if a malformed IPv6 packet in a specific format is sent to that machine, the machine can hang while processing that packet. The problem can happen only if an IPv6 address is configured on any of the network interfaces.

The remote host is missing AIX PTF U857842, which is related to the security of the package bos.net.tcp.server.

If specific combinations of RDATA are loaded into a nameserver, either via cache or an authoritative zone, a subsequent query for a related record will cause named to lock up.

ID	Name	Severity
72287	AIX 6.1 TL 9 : xorg (IV52978)	medium
72070	AIX 5.3 TL 12 : xorg (IV53331)	medium
72069	AIX 7.1 TL 2 : xorg (IV52186)	medium
72068	AIX 7.1 TL 1 : xorg (IV52185)	medium
72067	AIX 6.1 TL 8 : xorg (IV52184)	medium
72066	AIX 6.1 TL 7 : xorg (IV52181)	medium
71165	AIX 6.1 TL 9 : bos.net.tcp.server (U855334)	high
71164	AIX 6.1 TL 9 : bos.net.tcp.client (U855283)	high
71163	AIX 6.1 TL 9 : bos.mp64 (U854672)	medium
71162	AIX 6.1 TL 9 : bos.rte.methods (U854553)	high
71161	AIX 6.1 TL 9 : bos.rte.filesystem (U854544)	low
71160	AIX 6.1 TL 9 : devices.common.IBM.ib.rte (U854542)	high
70721	AIX 5.3 TL 12 : cmdque (IV51388)	medium
70277	AIX 7.1 TL 2 : cmdque (IV47430)	medium
70276	AIX 7.1 TL 1 : cmdque (IV47429)	medium
70275	AIX 6.1 TL 8 : cmdque (IV47428)	medium
70274	AIX 6.1 TL 7 : cmdque (IV47427)	medium
69863	AIX PowerHA Cluster Management Unspecified Remote Configuration Manipulation	high
69353	AIX 6.1 TL 7 : devices.common.IBM.ib.rte (U859167)	high
69352	AIX 6.1 TL 6 : bos.perf.perfstat (U857768)	high
69351	AIX 6.1 TL 6 : devices.common.IBM.ib.rte (U857762)	high
69350	AIX 6.1 TL 6 : bos.net.tcp.client (U857748)	high
69349	AIX 6.1 TL 7 : bos.net.tcp.client (U857721)	high
69312	AIX 7.1 : bos.perf.perfstat (U858372)	high
69311	AIX 7.1 / 7.1 TL 3 : devices.common.IBM.ib.rte (U858349)	high
69310	AIX 7.1 : bos.net.tcp.client (U858320)	high
69309	AIX 7.1 : bos.mp64 (U857885)	high
69308	AIX 7.1 TL 1 : devices.common.IBM.ib.rte (U855867)	high
69287	AIX 7.1 TL 2 : devices.common.IBM.ib.rte (U857552)	high
69286	AIX 6.1 TL 8 : devices.common.IBM.ib.rte (U855978)	high
69285	AIX 6.1 TL 8 : bos.net.tcp.client (U855964)	high
68969	AIX 6.1 TL 7 : infiniband (IV43827)	high
68968	AIX 7.1 TL 1 : infiniband (IV43756)	high
68967	AIX 6.1 TL 6 : infiniband (IV43582)	high
68966	AIX 6.1 TL 8 : infiniband (IV43580)	high
68965	AIX 7.1 TL 0 : infiniband (IV43562)	high
68964	AIX 7.1 TL 2 : infiniband (IV43561)	high
67182	AIX 7.1 TL 2 : tftp (IV42935)	high
67181	AIX 7.1 TL 0 : tftp (IV42934)	high
67180	AIX 6.1 TL 8 : tftp (IV42933)	high
67179	AIX 6.1 TL 7 : tftp (IV42932)	high
67178	AIX 7.1 TL 1 : tftp (IV42700)	high
67177	AIX 6.1 TL 6 : tftp (IV40221)	high
66790	AIX 7.1 TL 0 : inet (IV42264)	high
66789	AIX 7.1 TL 1 : inet (IV42229)	high
66788	AIX 6.1 TL 8 : inet (IV42124)	high
66787	AIX 7.1 TL 2 : inet (IV42095)	high
66786	AIX 6.1 TL 7 : inet (IV42072)	high
66785	AIX 6.1 TL 6 : inet (IV37925)	high
66280	AIX 7.1 : bos.net.tcp.server (U857842)	high

Detections

Analytics

AIX Local Security Checks Family for Nessus

medium

medium

medium

medium

medium

medium

high

high

medium

high

low

high

medium

medium

medium

medium

medium

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high