< Back to JetLib.com

jetlib.sec » Tags » aix

« Expand/Collapse

15 items tagged "aix"

Related tags: service vulnerability [+], ibm aix [+], scsi protocol [+], scsi [+], rpc [+], protocol driver [+], vulnerability [+], usa [+], tim shelton tags [+], stack buffer [+], heap [+], exploitation methods [+], david litchfield [+], calendar daemon [+], buffer overflow vulnerability [+], aix operating system [+], symbolic link [+], segmentation fault [+], segmentation [+], security advisory [+], security [+], secunia [+], scout code [+], remote [+], luns [+], ldap [+], inventory [+], information disclosure vulnerability [+], hash [+], ftpd [+], ftp [+], file deletion [+], fault [+], denial of service [+], aix platforms [+], advisory [+], ibm [+]

February 16, 2012
7:00
Segmentation fault during scans on AIX platforms
» ‎ Sophos product advisories

Segmentation fault during scans on AIX platforms
Tags: fault segmentation aix aix-platforms segmentation-fault

January 10, 2012
0:00
Vuln: IBM AIX Inventory Scout Code Symbolic Link and Arbitrary File Deletion Vulnerability
» ‎ SecurityFocus Vulnerabilities

IBM AIX Inventory Scout Code Symbolic Link and Arbitrary File Deletion Vulnerability
Tags: inventory aix ibm scout-code file-deletion symbolic-link ibm-aix

November 22, 2011
19:36
Secunia Security Advisory 46976
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - IBM has acknowledged a vulnerability in the Digest module for Perl included in AIX, which can be exploited by malicious people to compromise an application using the vulnerable module.
Tags: advisory secunia security security-advisory aix

September 22, 2011
13:44
[Paper] Advanced AIX Heap Exploitation Methods
» ‎ SecDocs

Authors: Tim Shelton
Tags: heap overflow heap AIX
Event: Black Hat USA 2010
Abstract: With the ever increasing importance of providing and maintaining reliable services for both infrastructure support as well as business continuity, companies rely upon the IBM AIX operating system. In most cases, these machines hold the most critical data available for their business which makes IBM AIX a highly valued target from a hacker’s perspective. Over the past decade, hackers have increasingly focused on infiltrating valuable data such as proprietary databases, credit information, product pricing information and more. As such, the importance of protecting the IBM AIX operating system should be priority one. Initial heap exploitation research was first documented and published by David Litchfield, in August of 2005. His paper entitled, ”An Introduction to Heap overflows on AIX 5.3L” focused on AIX heap abuse within the utilization of heap’s free()/rightmost() functions. While Litchfield’s method solves one scenario, there is an additional scenario that has been left out. So what is the difference between the leftmost call versus rightmost? A stack trace will show leftmost is utilized when a fresh heap segment is requested, while rightmost is utilized when the application requests the heap to remove a previously allocated chunk from memory.
Tags: heap aix ibm tim-shelton-tags david-litchfield usa aix-operating-system exploitation-methods
13:44
[Slides] Advanced AIX Heap Exploitation Methods
» ‎ SecDocs

Authors: Tim Shelton
Tags: heap overflow heap AIX
Event: Black Hat USA 2010
Abstract: With the ever increasing importance of providing and maintaining reliable services for both infrastructure support as well as business continuity, companies rely upon the IBM AIX operating system. In most cases, these machines hold the most critical data available for their business which makes IBM AIX a highly valued target from a hacker’s perspective. Over the past decade, hackers have increasingly focused on infiltrating valuable data such as proprietary databases, credit information, product pricing information and more. As such, the importance of protecting the IBM AIX operating system should be priority one. Initial heap exploitation research was first documented and published by David Litchfield, in August of 2005. His paper entitled, ”An Introduction to Heap overflows on AIX 5.3L” focused on AIX heap abuse within the utilization of heap’s free()/rightmost() functions. While Litchfield’s method solves one scenario, there is an additional scenario that has been left out. So what is the difference between the leftmost call versus rightmost? A stack trace will show leftmost is utilized when a fresh heap segment is requested, while rightmost is utilized when the application requests the heap to remove a previously allocated chunk from memory.
Tags: heap aix ibm tim-shelton-tags david-litchfield usa aix-operating-system exploitation-methods

June 11, 2011
0:00
Vuln: IBM AIX Luns Ownership Security Bypass Vulnerability
» ‎ SecurityFocus Vulnerabilities

IBM AIX Luns Ownership Security Bypass Vulnerability
Tags: luns aix ibm ibm-aix vulnerability
March 17, 2011
0:00
Vuln: IBM AIX 'FC SCSI' Protocol Driver Denial of Service Vulnerability
» ‎ SecurityFocus Vulnerabilities

IBM AIX 'FC SCSI' Protocol Driver Denial of Service Vulnerability
Tags: aix ibm scsi scsi-protocol protocol-driver service-vulnerability
February 28, 2011
0:00
Vuln: IBM AIX 'FC SCSI' Protocol Driver Denial of Service Vulnerability
» ‎ SecurityFocus Vulnerabilities

IBM AIX 'FC SCSI' Protocol Driver Denial of Service Vulnerability
Tags: aix ibm scsi scsi-protocol protocol-driver service-vulnerability
January 20, 2011
0:00
Vuln: IBM AIX 'FC SCSI' Protocol Driver Denial of Service Vulnerability
» ‎ SecurityFocus Vulnerabilities

IBM AIX 'FC SCSI' Protocol Driver Denial of Service Vulnerability
Tags: aix ibm scsi scsi-protocol protocol-driver service-vulnerability

July 24, 2010
1:00
IBM AIX 5l FTPd Remote DES Hash Exploit
» ‎ 1337day (was: Inj3ct0r, 1337db)

IBM AIX 5l FTPd Remote DES Hash Exploit
Tags: ftpd aix ibm ibm-aix hash

July 19, 2010
0:00
Vuln: IBM AIX FTP Server 'NLST' Command Information Disclosure Vulnerability
» ‎ SecurityFocus Vulnerabilities

IBM AIX FTP Server 'NLST' Command Information Disclosure Vulnerability
Tags: aix ibm ftp information-disclosure-vulnerability
February 28, 2010
0:00
Vuln: IBM AIX LDAP Login Local Denial of Service Vulnerability
» ‎ SecurityFocus Vulnerabilities

IBM AIX LDAP Login Local Denial of Service Vulnerability
Tags: ldap aix ibm service-vulnerability denial-of-service ibm-aix
February 10, 2010
0:00
Vuln: IBM AIX 'rpc.cmsd' Calendar Daemon Remote Stack Buffer Overflow Vulnerability
» ‎ SecurityFocus Vulnerabilities

IBM AIX 'rpc.cmsd' Calendar Daemon Remote Stack Buffer Overflow Vulnerability
Tags: aix ibm rpc buffer-overflow-vulnerability calendar-daemon stack-buffer
February 02, 2010
9:00
Bugtraq: Remote Vulnerability in AIX RPC.cmsd released by iDefense
» ‎ SecurityFocus Vulnerabilities

Remote Vulnerability in AIX RPC.cmsd released by iDefense
Tags: vulnerability aix remote rpc
0:00
Vuln: IBM AIX 'rpc.cmsd' Calendar Daemon Remote Stack Buffer Overflow Vulnerability
» ‎ SecurityFocus Vulnerabilities

IBM AIX 'rpc.cmsd' Calendar Daemon Remote Stack Buffer Overflow Vulnerability
Tags: aix ibm rpc buffer-overflow-vulnerability calendar-daemon stack-buffer