🟠 High ⏱ 30–90 min Last verified: 24 August 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-1999-0017, IBM PSIRT advisory page CVE: CVE-1999-0017 NVD summary: FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce. References: exchange.xforce.ibmcloud.com/vulnerabilities/CVE […]
🟡 Medium ⏱ 5–30 min Last verified: 24 August 2022 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
Introduction IBM AIX 7.3 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.3 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to configure vnc server on IBM AIX 7.3 with practical […]
🟠 High ⏱ 15–60 min Last verified: 24 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ikiwiki — authentication bypass vulnerability Related CVEs: CVE-2008-0165 CVE-2008-0169 CVE-2008-0808 CVE-2009-2944 CVE-2011-1408 CVE-2016-10026 CVE-2016-4561 CVE-2016-9645 +2 more Upstream summary: ikiwiki reports: The ikiwiki maintainers discovered further flaws similar to CVE-2016-9646 […]
🟢 Low ⏱ 5–15 min Last verified: 24 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_perl — cross-site scripting Related CVEs: CVE-2007-1349 CVE-2009-0796 Upstream summary: Secunia reports: Certain input passed to the "Apache::Status" and "Apache2::Status" modules is not properly sanitised before being returned to the […]
🟠 High ⏱ 5–30 min Last verified: 24 August 2022 Affected versions: Windows Server 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟢 Low ⏱ 5–15 min Last verified: 24 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-22083 Upstream summary: jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode() function. Note: It has been argued that this is […]
Introduction IBM AIX 7.2 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.2 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to use aix live update on ibm aix 7.2 on […]
Introduction Debian 11 Bullseye is built around the ethos of stability and free software. Setting up set up nginx with php-fpm connection pooling on debian 11 on Bullseye leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Bullseye freeze. Follow each […]
🟢 Low ⏱ 5–15 min Last verified: 24 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-14339 Upstream summary: The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force […]
