PT-2016-4117 · Ibm · Aix+2

Published 2016-07-26 · Updated 2021-08-31 · CVE-2016-0266

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.3, 6.1, 7.1, and 7.2 VIOS version 2.2.x

Description The issue allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors because the software does not default to the latest TLS version. This makes it easier for remote attackers to use man-in-the-middle techniques.

Recommendations For IBM AIX versions 5.3, 6.1, 7.1, and 7.2, update the configuration to require the newest version of TLS by default. For VIOS version 2.2.x, update the configuration to require the newest version of TLS by default.

Fix

Weakness Enumeration

CWE-254

Related Identifiers

CVE-2016-0266

Affected Products

Aix

Ibm Aix

Vios

References · 12

• http://www-01.ibm.com/support/docview.wss?uid=swg1IV86120 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV86132 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV86117 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV86116 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV86119 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0266 · Security Note
• https://osv.dev/vulnerability/CVE-2016-0266 · Vendor Advisory
• https://aix.software.ibm.com/aix/efixes/security/nettcp_advisory2.asc · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV86118 · Vendor Advisory
• http://securityfocus.com/bid/92150 · Note
• https://t.me/cvenotify/20441 · Telegram Post
• http://securitytracker.com/id/1036467 · Note