Vulnerabilities of AIX
AIX vulnerability: information disclosure via FTP NLST
An attacker can use the FTP NLST (or LIST) command, in order to force the ftpd daemon to generate a coredump, containing sensitive information.

AIX vulnerability: memory corruption via rpc.pcnfsd
A remote attacker can send a malicious RPC query, which corrupts the rpc.pcnfsd memory, in order to generate a denial of service, and possibly to execute code.

AIX vulnerability: buffer overflow via bn_wexpand
The OpenSSL library does not check the error code of the bn_wexpand() function, which can generate a denial of service, or lead to code execution.

AIX vulnerability: denial of service via LDAP
A local attacker may forbid the access to users authenticated by LDAP.

AIX vulnerability: buffer overflow of qoslist and qosmod
A local attacker can generate an overflow in the qoslist and qosmod commands, in order to elevate his privileges.

Display other vulnerabilities of AIX described by Vigil@nce...

Display information about AIX:

• http://www-03.ibm.com/systems/fr/power/software/aix/index.html