Summary
Ein Angreifer kann mehrere Schwachstellen in IBM AIX ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Dateien zu manipulieren, und um beliebigen Programmcode mit Root Rechten auszuführen.
Product
AIX ist ein Unix Betriebssystem von IBM.
Vulnerabilities 4
-
Critical 10.0
AIX Code Execution
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerabil…
-
Critical 9.6
AIX Command Execution
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously…
-
Critical 9.0
AIX Insufficiently Protected Credentials
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which is susceptible to unauthorized access by an attacker using man in the middle techniques.
-
High 8.2
AIX Path Traversal
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request to write arbitrary files on …
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2025-180538, EUVD-2025-180539, EUVD-2025-180540, EUVD-2025-180541
-
#1
Initiale Fassung
References
-
IBM Security Bulletin vom 2025-11-13
https://www.ibm.com/support/pages/node/7251173