Home Unlabelled IBM Security Bulletin: Vulnerability in pConsole impacts AIX (CVE-2016-0266)

IBM Security Bulletin: Vulnerability in pConsole impacts AIX (CVE-2016-0266)

Wednesday, December 07, 2016

Read

pConsole on AIX does not support TLS 1.2.

CVE(s): CVE-2016-0266

Affected product(s) and affected version(s):


 AIX 6.1, 7.1
The following fileset levels are vulnerable:
key_fileset = aix
Fileset Lower Level Upper Level KEY ---------------------------------------------------------
sysmgt.pconsole.rte 6.1.9.0 6.1.9.100 key_w_fs
sysmgt.pconsole.rte 7.1.3.0 7.1.3.x key_w_fs
sysmgt.pconsole.rte 7.1.4.0 7.1.4.0 key_w_fs
Note: To find out whether the affected filesets are installed on your systems, refer to the lslpp command found in the AIX
user's guide.
Example: lslpp -L | grep -i sysmgt.pconsole.rte

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2h3KmS2
X-Force Database: http://ift.tt/2axFyWO

from IBM Product Security Incident Response Team http://ift.tt/2h3AxTY