IT, Cloud & DevOps Blog

IBM AIX 7.2 — CVE-2002-1040 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-2002-1040 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 5 October 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2002-1040, IBM PSIRT advisory page CVE: CVE-2002-1040 NVD summary: Unknown vulnerability in the WebSecure (DFSWeb) configuration utilities in AIX 4.x, possibly related to relative pathnames. References: archives.neohapsis.com/archives/aix/2002-q3/0000   archives.neohapsis.com/archives/aix/2002-q3/0000 Table of contents […]

Read more
Ubuntu 16.04 — network-manager-applet — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — network-manager-applet — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 October 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3217-1 Related CVEs: https://launchpad.net/bugs/1668321 Upstream summary: Frederic Bardy and Quentin Biguenet discovered that network-manager-applet incorrectly checked permissions when connecting to certain wireless networks. A local attacker could use this issue […]

Read more
Ubuntu 14.04 — ecryptfs-utils — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — ecryptfs-utils — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 October 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2876-1 Related CVEs: CVE-2016-1572 CVE-2014-9687 Upstream summary: Jann Horn discovered that mount.ecryptfs_private would mount over certain directories in the proc filesystem. A local attacker could use this to escalate their […]

Read more
IBM AIX 7.2 — CVE-2006-5003 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-2006-5003 — vulnerability — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 3 October 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2006-5003, IBM Support Bulletin CVE: CVE-2006-5003 NVD summary: Unspecified vulnerability in the named8 command in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands via unspecified vectors. References: ftp://aix.software.ibm.com/aix/efixes/security/R […]

Read more
IBM AIX 7.2 — CVE-2007-1223 — denial of service — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-2007-1223 — denial of service — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 28 September 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2007-1223, IBM PSIRT advisory page CVE: CVE-2007-1223 NVD summary: Unspecified vulnerability in Hitachi OSAS/FT/W before 20070223 allows attackers to cause a denial of service (responder control processing halt) by sending "data unexpectedly […]

Read more
CHAT