Printer commands mkque and mkquedev are susceptible to buffer overflow by users belonging to the 'printq' group. These commands are owned by 'root' and SUID bit set. The group is set to 'printq'. By default, no users are belong to the 'printq'.

An unspecified vulnerability in the IBM PowerHA Cluster Management monitoring of port 6177 could allow a remote attacker to make unauthorized changes the remote host's AIX configuration.

The remote host is missing AIX PTF U859167, which is related to the security of the package devices.common.IBM.ib.rte.

Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority.

The remote host is missing AIX PTF U857768, which is related to the security of the package bos.perf.perfstat.

The remote host is missing AIX PTF U857762, which is related to the security of the package devices.common.IBM.ib.rte.

Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority.

The remote host is missing AIX PTF U857748, which is related to the security of the package bos.net.tcp.client.

If an AIX machine has IPv6 address configured, and if a malformed IPv6 packet in a specific format is sent to that machine, the machine can hang while processing that packet. The problem can happen only if an IPv6 address is configured on any of the network interfaces.

The remote host is missing AIX PTF U857721, which is related to the security of the package bos.net.tcp.client.

If an AIX machine has IPv6 address configured, and if a malformed IPv6 packet in a specific format is sent to that machine, the machine can hang while processing that packet. The problem can happen only if an IPv6 address is configured on any of the network interfaces.

The remote host is missing AIX PTF U858372, which is related to the security of the package bos.perf.perfstat.

The remote host is missing AIX PTF U858349, which is related to the security of the package devices.common.IBM.ib.rte.

Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority.

The remote host is missing AIX PTF U858320, which is related to the security of the package bos.net.tcp.client.

AIX system set up with stock sendmail will run arbitrary code through a users .forward. This apples to sendmail_ssl and sendmail_nossl.

The remote host is missing AIX PTF U857885, which is related to the security of the package bos.mp64.

The remote host is missing AIX PTF U855867, which is related to the security of the package devices.common.IBM.ib.rte.

Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority.

The remote host is missing AIX PTF U857552, which is related to the security of the package devices.common.IBM.ib.rte.

Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority.

The remote host is missing AIX PTF U855978, which is related to the security of the package devices.common.IBM.ib.rte.

Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority.

The remote host is missing AIX PTF U855964, which is related to the security of the package bos.net.tcp.client.

If an AIX machine has IPv6 address configured, and if a malformed IPv6 packet in a specific format is sent to that machine, the machine can hang while processing that packet. The problem can happen only if an IPv6 address is configured on any of the network interfaces.

Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority.

A non-root user can read and overwrite files owned by others including root via tftp client.

If an AIX machine has IPv6 address configured, and if a malformed IPv6 packet in a specific format is sent to that machine, the machine can hang while processing that packet. The problem can happen only if an IPv6 address is configured on any of the network interfaces.

The remote host is missing AIX PTF U857842, which is related to the security of the package bos.net.tcp.server.

If specific combinations of RDATA are loaded into a nameserver, either via cache or an authoritative zone, a subsequent query for a related record will cause named to lock up.

The remote host is missing AIX PTF U855824, which is related to the security of the package bos.net.tcp.server.

If specific combinations of RDATA are loaded into a nameserver, either via cache or an authoritative zone, a subsequent query for a related record will cause named to lock up.

The remote host is missing AIX PTF U854884, which is related to the security of the package bos.mp64.

The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp.

The remote host is missing AIX PTF U854868, which is related to the security of the package bos.rte.filesystem.

IBM AIX is vulnerable to a denial of service, caused by improper restrictions on the fuser command. A local attacker could exploit this vulnerability via the -k argument to kill a process of another user.

The remote host is missing AIX PTF U854841, which is related to the security of the package bos.rte.filesystem.

IBM AIX is vulnerable to a denial of service, caused by improper restrictions on the fuser command. A local attacker could exploit this vulnerability via the -k argument to kill a process of another user.

The remote host is missing AIX PTF U854839, which is related to the security of the package bos.mp64.

The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp.

The remote host is missing AIX PTF U857181, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U852816, which is related to the security of the package bos.net.tcp.client.

The remote host is missing AIX PTF U855520, which is related to the security of the package bos.rte.filesystem.

IBM AIX is vulnerable to a denial of service, caused by improper restrictions on the fuser command. A local attacker could exploit this vulnerability via the -k argument to kill a process of another user.

The remote host is missing AIX PTF U854751, which is related to the security of the package bos.mp64.

The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp.

The remote host is missing AIX PTF U854732, which is related to the security of the package bos.net.tcp.server.

If specific combinations of RDATA are loaded into a nameserver, either via cache or an authoritative zone, a subsequent query for a related record will cause named to lock up.

The remote host is missing AIX PTF U854646, which is related to the security of the package bos.net.tcp.server.

If specific combinations of RDATA are loaded into a nameserver, either via cache or an authoritative zone, a subsequent query for a related record will cause named to lock up.

The remote host is missing AIX PTF U854618, which is related to the security of the package bos.mp64.

The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp.

ID	Name	Severity
70721	AIX 5.3 TL 12 : cmdque (IV51388)	medium
70277	AIX 7.1 TL 2 : cmdque (IV47430)	medium
70276	AIX 7.1 TL 1 : cmdque (IV47429)	medium
70275	AIX 6.1 TL 8 : cmdque (IV47428)	medium
70274	AIX 6.1 TL 7 : cmdque (IV47427)	medium
69863	AIX PowerHA Cluster Management Unspecified Remote Configuration Manipulation	high
69353	AIX 6.1 TL 7 : devices.common.IBM.ib.rte (U859167)	high
69352	AIX 6.1 TL 6 : bos.perf.perfstat (U857768)	high
69351	AIX 6.1 TL 6 : devices.common.IBM.ib.rte (U857762)	high
69350	AIX 6.1 TL 6 : bos.net.tcp.client (U857748)	high
69349	AIX 6.1 TL 7 : bos.net.tcp.client (U857721)	high
69312	AIX 7.1 : bos.perf.perfstat (U858372)	high
69311	AIX 7.1 / 7.1 TL 3 : devices.common.IBM.ib.rte (U858349)	high
69310	AIX 7.1 : bos.net.tcp.client (U858320)	high
69309	AIX 7.1 : bos.mp64 (U857885)	high
69308	AIX 7.1 TL 1 : devices.common.IBM.ib.rte (U855867)	high
69287	AIX 7.1 TL 2 : devices.common.IBM.ib.rte (U857552)	high
69286	AIX 6.1 TL 8 : devices.common.IBM.ib.rte (U855978)	high
69285	AIX 6.1 TL 8 : bos.net.tcp.client (U855964)	high
68969	AIX 6.1 TL 7 : infiniband (IV43827)	high
68968	AIX 7.1 TL 1 : infiniband (IV43756)	high
68967	AIX 6.1 TL 6 : infiniband (IV43582)	high
68966	AIX 6.1 TL 8 : infiniband (IV43580)	high
68965	AIX 7.1 TL 0 : infiniband (IV43562)	high
68964	AIX 7.1 TL 2 : infiniband (IV43561)	high
67182	AIX 7.1 TL 2 : tftp (IV42935)	high
67181	AIX 7.1 TL 0 : tftp (IV42934)	high
67180	AIX 6.1 TL 8 : tftp (IV42933)	high
67179	AIX 6.1 TL 7 : tftp (IV42932)	high
67178	AIX 7.1 TL 1 : tftp (IV42700)	high
67177	AIX 6.1 TL 6 : tftp (IV40221)	high
66790	AIX 7.1 TL 0 : inet (IV42264)	high
66789	AIX 7.1 TL 1 : inet (IV42229)	high
66788	AIX 6.1 TL 8 : inet (IV42124)	high
66787	AIX 7.1 TL 2 : inet (IV42095)	high
66786	AIX 6.1 TL 7 : inet (IV42072)	high
66785	AIX 6.1 TL 6 : inet (IV37925)	high
66280	AIX 7.1 : bos.net.tcp.server (U857842)	high
66279	AIX 7.1 TL 1 : bos.net.tcp.server (U855824)	high
66278	AIX 7.1 TL 1 : bos.mp64 (U854884)	medium
66277	AIX 7.1 TL 1 : bos.rte.filesystem (U854868)	low
66276	AIX 7.1 : bos.rte.filesystem (U854841)	low
66275	AIX 7.1 : bos.mp64 (U854839)	medium
65919	AIX 7.1 TL 1 : bos.net.tcp.client (U857181)	high
65918	AIX 7.1 : bos.net.tcp.client (U852816)	high
65712	AIX 6.1 TL 6 : bos.rte.filesystem (U855520)	low
65711	AIX 6.1 TL 6 : bos.mp64 (U854751)	medium
65710	AIX 6.1 TL 6 : bos.net.tcp.server (U854732)	high
65709	AIX 6.1 TL 7 : bos.net.tcp.server (U854646)	high
65708	AIX 6.1 TL 7 : bos.mp64 (U854618)	medium

Detections

Analytics

AIX Local Security Checks Family for Nessus

medium

medium

medium

medium

medium

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

medium

low

low

medium

high

high

low

medium

high

high

medium