exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New
Showing 101 - 125 of 429 RSS Feed

Operating System: AIX

Samhain File Integrity Checker 2.8.3a
Posted Mar 23, 2011
Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: Samhain now runs lstat/stat calls in a subprocess to avoid getting blocked by hanging NFS mounts. A compile error on Windows/Cygwin as well as minor networking issues have been fixed.
tags | tool, tcp, intrusion detection
systems | linux, unix, solaris, aix, hpux, unixware
SHA-256 | e39d3eff755a71deca8fd07ef36e2abcce5e3da5fca10682c30721ab94df7c01
Samhain File Integrity Checker 2.8.2
Posted Feb 16, 2011
Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: It is possible now to skip checksumming for files matching user-defined criteria (based on file size, permission, name, and/or file type). Several minor bugs have been fixed.
tags | tool, tcp, intrusion detection
systems | linux, unix, solaris, aix, hpux, unixware
SHA-256 | e540629c6ff9fde640ac60a02cfab398a398992ca4c964d45644c176ae77aba1
rpc.cmsd Remote Proof Of Concept Exploit
Posted Feb 8, 2011
Authored by Rodrigo Rubira Branco

rpc.cmsd / Calendar Manager RPC service remote proof of concept buffer overflow exploit for Solaris, AIX, and HP-UX.

tags | exploit, remote, overflow, proof of concept
systems | solaris, aix, hpux
advisories | CVE-2010-4435
SHA-256 | 5b93d417eda40ad6a76cd6bd81c57c1a00b7622bb6aa9d80ff8bb2625d7e3c02
Secunia Security Advisory 42962
Posted Jan 20, 2011
Authored by Secunia | Site secunia.com

Secunia Security Advisory - A vulnerability has been reported in IBM AIX, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

tags | advisory, denial of service, local
systems | aix
SHA-256 | 4dc61718298a5987b1a32bbab2f1af4949369c8385d04c61bd160cac2b852790
Samhain File Integrity Checker 2.8.0
Posted Oct 31, 2010
Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: On Linux, it\'s possible now to have samhain report who changed a file (employing the kernel audit system). A module has been added to monitor keys in the Windows registry, and IPv6 networking is supported now.
tags | tool, tcp, intrusion detection
systems | linux, unix, solaris, aix, hpux, unixware
SHA-256 | f257cab9bf03f27ecf0fdaf8ea598c26177c337533d9a1310a81b215d7ec3638
HP Security Bulletin HPSBMA02596 SSRT100271
Posted Oct 22, 2010
Authored by Hewlett Packard | Site hp.com

HP Security Bulletin HPSBMA02596 SSRT100271 - A potential security vulnerability has been identified in HP AssetCenter and HP AssetManager for AIX, HP-UX, Linux, Solaris and Windows. The vulnerability could be exploited remotely resulting in cross site scripting (XSS). Revision 1 of this advisory.

tags | advisory, xss
systems | linux, windows, solaris, aix, hpux
advisories | CVE-2010-3291
SHA-256 | 5cb27aaadce212727e1fb1b7d6053f27b3c3f046ab99308fbdb5f12747debf67
Secunia Security Advisory 41446
Posted Sep 15, 2010
Authored by Secunia | Site secunia.com

Secunia Security Advisory - Two vulnerabilities have been reported in IBM AIX, which can be exploited by malicious, local users to gain escalated privileges and bypass certain security restrictions.

tags | advisory, local, vulnerability
systems | aix
SHA-256 | 21e1ff40476cd16c94fbbbe6078e35231da51009c9ae1388e08e56369e905d18
Secunia Security Advisory 40730
Posted Jul 28, 2010
Authored by Secunia | Site secunia.com

Secunia Security Advisory - IBM has acknowledged a vulnerability in AIX, which can be exploited by malicious people to poison the DNS cache.

tags | advisory
systems | aix
SHA-256 | ca6852945ee44d5f35efe6e7537ceb2f643e95e373eb7e6398fc37baf4ec9c20
Secunia Security Advisory 40617
Posted Jul 26, 2010
Authored by Secunia | Site secunia.com

Secunia Security Advisory - Kingcope has reported a security issue in IBM AIX, which can be exploited by malicious users to disclose potentially sensitive information.

tags | advisory
systems | aix
SHA-256 | 68fa8147b85c916c94fb9607511a38aa97d69390412e301bce205bc73dec3801
AIX 5l FTPd Hash Disclosure
Posted Jul 23, 2010
Authored by Kingcope

AIX 5l with FTP server remote root hash disclosure exploit. Creates a coredump including the root user hash from /etc/security/passwd. This is the second version that was written to be more portable between hosts.

tags | exploit, remote, root
systems | aix
SHA-256 | 3cbe3f2d71c1a259294434762694c1239444ee2fd3f2d2dc144601f1fe0a5675
Secunia Security Advisory 40632
Posted Jul 19, 2010
Authored by Secunia | Site secunia.com

Secunia Security Advisory - IBM has issued an update for AIX. This fixes a vulnerability, which can be exploited by malicious users to potentially compromise a vulnerable system.

tags | advisory
systems | aix
SHA-256 | ed6e61714e54d03e05c32c16fbad4989974124bc3c7c3df8499bb30d12ccd9be
rpc.pcnfsd Format String Exploit
Posted Jul 18, 2010
Authored by Rodrigo Rubira Branco

rpc.pcnfsd remote format string exploit for AIX versions 6.1.0 and below.

tags | exploit, remote
systems | aix
advisories | CVE-2010-1039
SHA-256 | 9608caf3a078bffe08324219439a68fb2fc7292b8e1b12c4e24838f89c4b78fa
Mandriva Linux Security Advisory 2010-129
Posted Jul 8, 2010
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2010-129 - The krshd and v4rcp applications in MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX, and Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which allows local users to gain privileges by causing setuid to fail to drop privileges using attacks such as resource exhaustion. The ftpd and ksu programs in MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, and Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which might allow local users to gain privileges by causing setuid to fail to drop privileges. Certain invalid GSS-API tokens can cause a GSS-API acceptor (server) to crash due to a null pointer dereference in the GSS-API library. The updated packages have been patched to correct these issues.

tags | advisory, local
systems | linux, aix, mandriva
advisories | CVE-2006-3083, CVE-2006-3084, CVE-2010-1321
SHA-256 | 1229d0c29790afa2ad1dd4aa3ac27bed53aaf20094ab9e3f74e7252954698b5d
Samhain File Integrity Checker 2.7.1
Posted Jun 7, 2010
Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: Logging of client reports to prelude can be done by the server now (rather than by the clients themselves). The configuration file parser now accepts C-style quoting for filenames, and the maximum line length has been increased to 16382 characters. Some compile problems have been fixed.
tags | tool, tcp, intrusion detection
systems | linux, unix, solaris, aix, hpux, unixware
SHA-256 | 1537f77e444521e01d4bdc073d3270a0bde251b52af1df15d03057b16213cc57
HP Security Bulletin HPSBMA02538 SSRT100136
Posted Jun 4, 2010
Authored by Hewlett Packard | Site hp.com

HP Security Bulletin - HP Security Bulletin - A potential security vulnerability has been identified with HP ServiceCenter running on AIX, HP-UX, Linux, Solaris, and Windows. The vulnerability could be exploited remotely to allow cross site scripting (XSS).

tags | advisory, xss
systems | linux, windows, solaris, aix, hpux
advisories | CVE-2010-1963
SHA-256 | 6a47c3a6581bc13261acad4b6a1c5b73ae62c609aca4e687a965f06999787d06
HP Security Bulletin HPSBGN02315 SSRT071487
Posted May 27, 2010
Authored by Hewlett Packard | Site hp.com

HP Security Bulletin - A potential vulnerability has been identified with HP TestDirector for Quality Center running on AIX, Linux and Solaris. The vulnerability could be exploited to allow remote unauthorized access.

tags | advisory, remote
systems | linux, solaris, aix
advisories | CVE-2010-1959
SHA-256 | 1e575c5d721ba2d12194d427be9020879c0af490396e3c0b7f4bf70a24cc8e75
Secunia Security Advisory 39909
Posted May 26, 2010
Authored by Secunia | Site secunia.com

Secunia Security Advisory - A vulnerability has been reported in IBM Communications Server for AIX, which can be exploited by malicious people to cause a DoS (Denial of Service).

tags | advisory, denial of service
systems | aix
SHA-256 | 982c112b33f2f74a6384659be1997254e5037e7d14d017c47452b90dd3574b45
Secunia Security Advisory 39932
Posted May 24, 2010
Authored by Secunia | Site secunia.com

Secunia Security Advisory - IBM has issued an update for OpenSSL included in AIX. This fixes some vulnerabilities, where one has an unknown impact and the others can be exploited by malicious people to cause a DoS (Denial of Service).

tags | advisory, denial of service, vulnerability
systems | aix
SHA-256 | 3cb55df140e3a53ee7321e300ec23031ebfe8892f4d1ac9c37bd12a2d28ba19c
rpc.pcnfsd Syslog Format String
Posted May 22, 2010
Authored by Rodrigo Rubira Branco

rpc.pcnfsd suffers from a syslog related format string vulnerability. IBM AIX versions 6.1.0 and below, IRIX 6.5 and HP-UX versions 11.11, 11.23 and 11.31 are all affected.

tags | advisory
systems | irix, aix, hpux
advisories | CVE-2010-1039
SHA-256 | 78d8496b11da0be50a94a9121549a259d6a954ea9337ad9e3d7cd651348c21b2
Secunia Security Advisory 39911
Posted May 22, 2010
Authored by Secunia | Site secunia.com

Secunia Security Advisory - A vulnerability has been reported in IBM AIX, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.

tags | advisory, denial of service
systems | aix
SHA-256 | 4bb81c39bfb40eee471f8ec5e55c75551a4c5f67391e5c3da2b5fd0f36456e43
Samhain File Integrity Checker 2.7.0
Posted May 5, 2010
Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: The login monitoring module has been enhanced to check for anomalies. The kernel integrity check now supports Linux/x86_64, as well as Linux kernels that have /dev/kmem disabled.
tags | tool, tcp, intrusion detection
systems | linux, unix, solaris, aix, hpux, unixware
SHA-256 | 7e1384bb16fadb56efd506c88a8148fc7ce798d891fbdf821c243cf4404e608c
Samhain File Integrity Checker 2.6.4
Posted Mar 22, 2010
Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: The log monitoring module has been enhanced to allow monitoring the output of shell commands. Some bugs in the log monitoring and kernel checking modules have been fixed.
tags | tool, tcp, intrusion detection
systems | linux, unix, solaris, aix, hpux, unixware
SHA-256 | 9d4f8125bd5a7271397717e336604c14cb50966df682a141cd8d9829e6aea5bd
Secunia Security Advisory 38883
Posted Mar 12, 2010
Authored by Secunia | Site secunia.com

Secunia Security Advisory - IBM has acknowledged a vulnerability in sendmail in AIX, which can be exploited by malicious people to conduct spoofing attacks.

tags | advisory, spoof
systems | aix
SHA-256 | 27ac182920675952c61526041713c29dafa9c1f762a3531a6eec3692bac07db9
Samhain File Integrity Checker 2.6.3
Posted Mar 10, 2010
Authored by Rainer Wichmann | Site samhain.sourceforge.net

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

Changes: This release fixes a regression in the email module which caused messages of the highest priority to be queued along with lower priority messages, instead of being mailed immediately.
tags | tool, tcp, intrusion detection
systems | linux, unix, solaris, aix, hpux, unixware
SHA-256 | 8cd4ffd3e9ce8c519665215549971586b664385a5392246824a5eb3b4b4ba121
Secunia Security Advisory 38764
Posted Mar 2, 2010
Authored by Secunia | Site secunia.com

Secunia Security Advisory - IBM has acknowledged a vulnerability in AIX, which can be exploited by malicious people to cause a DoS (Denial of Service).

tags | advisory, denial of service
systems | aix
SHA-256 | 1e6d88b0d7244a96963663393d39febd256bff41037a103119091b2ce869dde5
Page 5 of 18
Back34567Next

File Archive:

May 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    May 1st
    44 Files
  • 2
    May 2nd
    5 Files
  • 3
    May 3rd
    11 Files
  • 4
    May 4th
    0 Files
  • 5
    May 5th
    0 Files
  • 6
    May 6th
    28 Files
  • 7
    May 7th
    3 Files
  • 8
    May 8th
    4 Files
  • 9
    May 9th
    54 Files
  • 10
    May 10th
    12 Files
  • 11
    May 11th
    0 Files
  • 12
    May 12th
    0 Files
  • 13
    May 13th
    17 Files
  • 14
    May 14th
    11 Files
  • 15
    May 15th
    0 Files
  • 16
    May 16th
    0 Files
  • 17
    May 17th
    0 Files
  • 18
    May 18th
    0 Files
  • 19
    May 19th
    0 Files
  • 20
    May 20th
    0 Files
  • 21
    May 21st
    0 Files
  • 22
    May 22nd
    0 Files
  • 23
    May 23rd
    0 Files
  • 24
    May 24th
    0 Files
  • 25
    May 25th
    0 Files
  • 26
    May 26th
    0 Files
  • 27
    May 27th
    0 Files
  • 28
    May 28th
    0 Files
  • 29
    May 29th
    0 Files
  • 30
    May 30th
    0 Files
  • 31
    May 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close