New ibm aix bulk file

2 Messages

Wood, Michael

Reply Threaded

Here is a new bulk file including all the AIX OVALs we have written so far.

For new vulnerabilities there are

CVE-2008-2513 - oval:com.hp.oval:def:20080612007
CVE-2008-2514 - oval:com.hp.oval:def:20080612008
CVE-2008-2515 - oval:com.hp.oval:def:20080612009

I modified the following oval definitions

CVE-2008-1600 - oval:org.mitre.oval:def:5566
CVE-2008-1601 - oval:org.mitre.oval:def:5497
CVE-2008-1599 - oval:org.mitre.oval:def:5468
CVE-2008-1593 - oval:org.mitre.oval:def:5434
CVE-2008-1595 - oval:org.mitre.oval:def:5321
CVE-2008-1593 - oval:org.mitre.oval:def:4595
CVE-2008-1274 - oval:org.mitre.oval:def:5169

And the following inventory definitions

oval:org.mitre.oval:def:5189
oval:org.mitre.oval:def:5325

Thanks,

--Michael Wood

To unsubscribe, send an email message to LISTSERV@... with
SIGNOFF OVAL-DISCUSSION-LIST
in the BODY of the message. If you have difficulties, write to OVAL-DISCUSSION-LIST-request@....

<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:aix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix unix-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#aix aix-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd">
<generator>
<oval:product_name>The OVAL Repository</oval:product_name>
<oval:schema_version>5.4</oval:schema_version>
<oval:timestamp>2008-06-12T09:07:37.597-04:00</oval:timestamp>
</generator>
<definitions>
<definition id="oval:org.mitre.oval:def:5566" version="1" class="vulnerability">
<metadata>
<title>IBM AIX lsmcode Environment Variable Bug Lets Local Users Gain Root Privileges</title>
<affected family="unix">
<platform>IBM AIX 5.2</platform>
<platform>IBM AIX 5.3</platform>
<platform>IBM AIX 6.1</platform>
</affected>
<reference source="CVE" ref_id="CVE-2008-1600" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1600"/>
<description>The lsmcode program on IBM AIX 5.2, 5.3, and 6.1 does not properly handle environment variables, which allows local users to gain privileges, a different vulnerability than CVE-2004-1329.</description>
<oval_repository>
<dates>
<submitted date="2008-04-18T15:10:44.000-05:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</submitted>
<modified comment="Modified the tests to apply to specific versions of AIX and added in IBM AIX 6.1 support" date="2008-06-12T11:18:00.144-04:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</modified>
<status_change date="2008-04-30T12:21:33.851-04:00">DRAFT</status_change>
<status_change date="2008-05-19T04:00:23.682-04:00">INTERIM</status_change>
<status_change date="2008-06-09T04:00:19.356-04:00">ACCEPTED</status_change>
</dates>
<status>ACCEPTED</status>
</oval_repository>
</metadata>
<criteria operator="OR" comment="Software Section">
<criteria operator="AND" comment="IBM AIX 5200-10 meets CVE-2008-1600">
<extend_definition comment="IBM AIX 5200-10 is installed" definition_ref="oval:com.hp.oval:def:20080612001"/>
<criterion negate="true" comment="All filesets for APAR IZ15276 are installed" test_ref="oval:org.mitre.oval:tst:7798"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5300-06 meets CVE-2008-1600">
<extend_definition comment="IBM AIX 5300-06 is installed" definition_ref="oval:com.hp.oval:def:20080612002"/>
<criterion negate="true" comment="All filesets for APAR IZ15100 are installed" test_ref="oval:org.mitre.oval:tst:7818"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5300-07 meets CVE-2008-1600">
<extend_definition comment="IBM AIX 5300-07 is installed" definition_ref="oval:com.hp.oval:def:20080612003"/>
<criterion negate="true" comment="All filesets for APAR IZ15057 are installed" test_ref="oval:org.mitre.oval:tst:7496"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5300-08 meets CVE-2008-1600">
<extend_definition comment="IBM AIX 5300-08 is installed" definition_ref="oval:com.hp.oval:def:20080612004"/>
<criterion negate="true" comment="All filesets for APAR IZ14526 are installed" test_ref="oval:com.hp.oval:tst:20080612006"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 6100-00 meets CVE-2008-1600">
<extend_definition comment="IBM AIX 6100-00 is installed" definition_ref="oval:com.hp.oval:def:20080612005"/>
<criterion negate="true" comment="All filesets for APAR IZ15277 are installed" test_ref="oval:com.hp.oval:tst:20080612007"/>
</criteria>
</criteria>
</definition>
<definition id="oval:org.mitre.oval:def:5497" version="1" class="vulnerability">
<metadata>
<title>IBM AIX Buffer Overflow in 'reboot' Command Lets Local Users Execute Arbitrary Code</title>
<affected family="unix">
<platform>IBM AIX 5.2</platform>
<platform>IBM AIX 5.3</platform>
</affected>
<reference source="CVE" ref_id="CVE-2008-1601" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1601"/>
<description>Stack-based buffer overflow in the reboot program on IBM AIX 5.2 and 5.3 allows local users in the shutdown group to gain privileges.</description>
<oval_repository>
<dates>
<submitted date="2008-04-11T15:10:44.000-05:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</submitted>
<modified comment="Modified the tests to apply to specific versions of AIX" date="2008-06-12T11:18:00.144-04:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</modified>
<status_change date="2008-04-30T12:21:45.365-04:00">DRAFT</status_change>
<status_change date="2008-05-19T04:00:22.154-04:00">INTERIM</status_change>
<status_change date="2008-06-09T04:00:16.589-04:00">ACCEPTED</status_change>
</dates>
<status>ACCEPTED</status>
</oval_repository>
</metadata>
<criteria operator="OR" comment="Software Section">
<criteria operator="AND" comment="IBM AIX 5200-10 meets CVE-2008-1601">
<extend_definition comment="IBM AIX 5200-10 is installed" definition_ref="oval:com.hp.oval:def:20080612001"/>
<criterion negate="true" comment="All filesets for APAR IZ15479 are installed" test_ref="oval:org.mitre.oval:tst:8052"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5300-06 meets CVE-2008-1601">
<extend_definition comment="IBM AIX 5300-06 is installed" definition_ref="oval:com.hp.oval:def:20080612002"/>
<criterion negate="true" comment="All filesets for APAR IZ15480 are installed" test_ref="oval:org.mitre.oval:tst:8041"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5300-07 meets CVE-2008-1601">
<extend_definition comment="IBM AIX 5300-07 is installed" definition_ref="oval:com.hp.oval:def:20080612003"/>
<criterion negate="true" comment="All filesets for APAR IZ06078 are installed" test_ref="oval:com.hp.oval:tst:20080612008"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5300-08 meets CVE-2008-1601">
<extend_definition comment="IBM AIX 5300-08 is installed" definition_ref="oval:com.hp.oval:def:20080612004"/>
<criterion negate="true" comment="All filesets for APAR IZ06199 are installed" test_ref="oval:com.hp.oval:tst:20080612009"/>
</criteria>
</criteria>
</definition>
<definition id="oval:org.mitre.oval:def:5468" version="1" class="vulnerability">
<metadata>
<title>IBM AIX 'nddstat' Commands Let Local Users Gain Root Privileges</title>
<affected family="unix">
<platform>IBM AIX 5.2</platform>
<platform>IBM AIX 5.3</platform>
<platform>IBM AIX 6.1</platform>
</affected>
<reference source="CVE" ref_id="CVE-2008-1599" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1599"/>
<description>The nddstat programs on IBM AIX 5.2, 5.3, and 6.1 do not properly handle environment variables, which allows local users to gain privileges by invoking (1) atmstat, (2) entstat, (3) fddistat, (4) hdlcstat, or (5) tokstat.</description>
<oval_repository>
<dates>
<submitted date="2008-04-18T15:10:44.000-05:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</submitted>
<modified comment="Modified the tests to apply to specific versions of AIX and added in support for IBM AIX 6.1" date="2008-06-12T11:18:00.144-04:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</modified>
<status_change date="2008-04-30T12:21:20.476-04:00">DRAFT</status_change>
<status_change date="2008-05-19T04:00:19.422-04:00">INTERIM</status_change>
<status_change date="2008-06-09T04:00:14.415-04:00">ACCEPTED</status_change>
</dates>
<status>ACCEPTED</status>
</oval_repository>
</metadata>
<criteria operator="OR" comment="Software Section">
<criteria operator="AND" comment="IBM AIX 5200-10 meets CVE-2008-1599">
<extend_definition comment="IBM AIX 5200-10 is installed" definition_ref="oval:com.hp.oval:def:20080612001"/>
<criterion negate="true" comment="All filesets for APAR IZ16991 are installed" test_ref="oval:org.mitre.oval:tst:7553"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5300-06 meets CVE-2008-1599">
<extend_definition comment="IBM AIX version is greater than or equal 5300-06" definition_ref="oval:com.hp.oval:def:20080612002"/>
<criterion negate="true" comment="All filesets for APAR IZ17058 are installed" test_ref="oval:org.mitre.oval:tst:7479"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5300-07 meets CVE-2008-1599">
<extend_definition comment="IBM AIX version is greater than or equal to 5300-07" definition_ref="oval:com.hp.oval:def:20080612003"/>
<criterion negate="true" comment="All filesets for APAR IZ17059 are installed" test_ref="oval:org.mitre.oval:tst:7959"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5300-08 meets CVE-2008-1599">
<extend_definition comment="IBM AIX version is greater than or equal to 5300-08" definition_ref="oval:com.hp.oval:def:20080612004"/>
<criterion negate="true" comment="All filesets for APAR IZ14508 are installed" test_ref="oval:com.hp.oval:tst:20080612010"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 6100-00 meets CVE-2008-1599">
<extend_definition comment="IBM AIX version is greater than or equal to 6100-00" definition_ref="oval:com.hp.oval:def:20080612005"/>
<criterion negate="true" comment="All filesets for APAR IZ16975 are installed" test_ref="oval:com.hp.oval:tst:20080612011"/>
</criteria>
</criteria>
</definition>
<definition id="oval:org.mitre.oval:def:5434" version="1" class="vulnerability">
<metadata>
<title>IBM AIX Multiple Privilege Escalation and Security Bypass Vulnerabilities</title>
<affected family="unix">
<platform>IBM AIX 5.2</platform>
<platform>IBM AIX 5.3</platform>
</affected>
<reference source="CVE" ref_id="CVE-2008-1594" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1593"/>
<description>The kernel in IBM AIX 5.2 and 5.3 does not properly handle resizing JFS2 filesystems on concurrent volume groups spread across multiple nodes, which allows local users of one node to cause a denial of service (remote node crash) by using chfs or lreducelv to reduce a filesystem's size.</description>
<oval_repository>
<dates>
<submitted date="2008-04-18T15:10:44.000-05:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</submitted>
<modified comment="Modified the tests to apply to specific versions of AIX" date="2008-06-12T11:18:00.144-04:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</modified>
<status_change date="2008-04-30T12:20:55.873-04:00">DRAFT</status_change>
<status_change date="2008-05-19T04:00:14.414-04:00">INTERIM</status_change>
<status_change date="2008-06-09T04:00:10.651-04:00">ACCEPTED</status_change>
</dates>
<status>ACCEPTED</status>
</oval_repository>
</metadata>
<criteria operator="OR" comment="Software Section">
<criteria operator="AND" comment="IBM AIX 5200-10 meets CVE-2008-1594">
<extend_definition comment="IBM AIX 5200-10 is installed" definition_ref="oval:com.hp.oval:def:20080612001"/>
<criterion negate="true" comment="All filesets for APAR IZ05246 are installed" test_ref="oval:org.mitre.oval:tst:8006"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5300-06 meets CVE-2008-1594">
<extend_definition comment="IBM AIX 5300-06" definition_ref="oval:com.hp.oval:def:20080612002"/>
<criterion negate="true" comment="All filesets for APAR IZ04953 are installed" test_ref="oval:org.mitre.oval:tst:7657"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5300-07 meets CVE-2008-1594">
<extend_definition comment="IBM AIX 5300-07 is installed" definition_ref="oval:com.hp.oval:def:20080612003"/>
<criterion negate="true" comment="All filesets for APAR IZ04946 are installed" test_ref="oval:org.mitre.oval:tst:7879"/>
</criteria>
</criteria>
</definition>
<definition id="oval:org.mitre.oval:def:5321" version="1" class="vulnerability">
<metadata>
<title>IBM AIX Multiple Privilege Escalation and Security Bypass Vulnerabilities</title>
<affected family="unix">
<platform>IBM AIX 5.2</platform>
<platform>IBM AIX 5.3</platform>
</affected>
<reference source="CVE" ref_id="CVE-2008-1595" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1595"/>
<description>The nddstat programs on IBM AIX 5.2, 5.3, and 6.1 do not properly handle environment variables, which allows local users to gain privileges by invoking (1) atmstat, (2) entstat, (3) fddistat, (4) hdlcstat, or (5) tokstat.</description>
<oval_repository>
<dates>
<submitted date="2008-04-18T15:10:44.000-05:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</submitted>
<modified comment="Modified the tests to apply to specific versions of AIX" date="2008-06-12T11:18:00.144-04:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</modified>
<status_change date="2008-04-30T12:21:08.997-04:00">DRAFT</status_change>
<status_change date="2008-05-19T04:00:12.079-04:00">INTERIM</status_change>
<status_change date="2008-06-09T04:00:10.226-04:00">ACCEPTED</status_change>
</dates>
<status>ACCEPTED</status>
</oval_repository>
</metadata>
<criteria operator="OR" comment="Software Section">
<criteria operator="AND" comment="IBM AIX 5200-10 meets CVE-2008-1595">
<extend_definition comment="IBM AIX 5200-10 is installed" definition_ref="oval:com.hp.oval:def:20080612001"/>
<criterion negate="true" comment="All filesets for APAR IZ06022 are installed" test_ref="oval:org.mitre.oval:tst:7136"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5300-06 meets CVE-2008-1595">
<extend_definition comment="IBM AIX 5300-06 is installed" definition_ref="oval:com.hp.oval:def:20080612002"/>
<criterion negate="true" comment="All filesets for APAR IZ06663 are installed" test_ref="oval:org.mitre.oval:tst:7896"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5300-07 meets CVE-2008-1595">
<extend_definition comment="IBM AIX 5300-07 is installed" definition_ref="oval:com.hp.oval:def:20080612003"/>
<criterion negate="true" comment="All filesets for APAR IZ06505 are installed" test_ref="oval:org.mitre.oval:tst:7599"/>
</criteria>
</criteria>
</definition>
<definition id="oval:org.mitre.oval:def:4595" version="1" class="vulnerability">
<metadata>
<title>IBM AIX Kernel Bugs Let Local Users Execute Arbitrary Code, Access Data, and Deny Service</title>
<affected family="unix">
<platform>IBM AIX 5.2</platform>
<platform>IBM AIX 5.3</platform>
<platform>IBM AIX 6.1</platform>
</affected>
<reference source="CVE" ref_id="CVE-2008-1593" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1593"/>
<description>The checkpoint and restart feature in the kernel in IBM AIX 5.2, 5.3, and 6.1 does not properly protect kernel memory, which allows local users to read and modify portions of memory and gain privileges via unspecified vectors involving a restart of a 64-bit process, probably related to the as_getadsp64 function.</description>
<oval_repository>
<dates>
<submitted date="2008-04-18T15:10:44.000-05:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</submitted>
<modified comment="Modified the tests to apply to specific versions of AIX and included support for IBM AIX 6.1" date="2008-06-12T11:18:00.144-04:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</modified>
<status_change date="2008-04-30T12:20:44.454-04:00">DRAFT</status_change>
<status_change date="2008-05-19T04:00:07.571-04:00">INTERIM</status_change>
<status_change date="2008-06-09T04:00:07.560-04:00">ACCEPTED</status_change>
</dates>
<status>ACCEPTED</status>
</oval_repository>
</metadata>
<criteria operator="OR" comment="Software Section">
<criteria operator="AND" comment="IBM AIX 5200-10 meets CVE-2008-1593">
<extend_definition comment="IBM AIX 5200-10 is installed" definition_ref="oval:com.hp.oval:def:20080612001"/>
<criterion negate="true" comment="All filesets for APAR IZ16992 are installed" test_ref="oval:org.mitre.oval:tst:7955"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5300-06 meets CVE-2008-1593">
<extend_definition comment="IBM AIX 5300-06 is installed" definition_ref="oval:com.hp.oval:def:20080612002"/>
<criterion negate="true" comment="All filesets for APAR IZ17111 are installed" test_ref="oval:org.mitre.oval:tst:7870"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5300-07 meets CVE-2008-1593">
<extend_definition comment="IBM AIX 5300-07 is installed" definition_ref="oval:com.hp.oval:def:20080612003"/>
<criterion negate="true" comment="All filesets for APAR IZ11820 are installed" test_ref="oval:org.mitre.oval:tst:7628"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5300-08 meets CVE-2008-1593">
<extend_definition comment="IBM AIX 5300-08 is installed" definition_ref="oval:com.hp.oval:def:20080612004"/>
<criterion negate="true" comment="All filesets for APAR IZ10749 are installed" test_ref="oval:com.hp.oval:tst:20080612012"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 6100-00 meets CVE-2008-1593">
<extend_definition comment="IBM AIX 6100-00 is installed" definition_ref="oval:com.hp.oval:def:20080612005"/>
<criterion negate="true" comment="All filesets for APAR IZ12794 are installed" test_ref="oval:com.hp.oval:tst:20080612013"/>
</criteria>
</criteria>
</definition>
<definition id="oval:org.mitre.oval:def:5470" version="1" class="vulnerability">
<metadata>
<title>IBM AIX buffer overflow in chcon command has unspecified impact</title>
<affected family="unix">
<platform>IBM AIX 5.2</platform>
<platform>IBM AIX 5.3</platform>
</affected>
<reference source="CVE" ref_id="CVE-2005-3396" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3396"/>
<description>Buffer overflow in the chcons (chcon) command in IBM AIX 5.2 and 5.3, when DEBUG MALLOC is enabled, might allow attackers to execute arbitrary code via a long command line argument.</description>
<oval_repository>
<dates>
<submitted date="2008-04-11T15:10:44.000-05:00">
<contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
</submitted>
<status_change date="2008-04-11T14:12:19.667-04:00">DRAFT</status_change>
<status_change date="2008-04-28T04:00:20.015-04:00">INTERIM</status_change>
<status_change date="2008-05-19T04:00:19.857-04:00">ACCEPTED</status_change>
</dates>
<status>ACCEPTED</status>
</oval_repository>
</metadata>
<criteria operator="OR" comment="Software Section">
<criteria operator="AND" comment="IBM AIX 5.2 meets CVE-2005-3396">
<extend_definition comment="IBM AIX 5.2 is installed" definition_ref="oval:org.mitre.oval:def:5189"/>
<criterion negate="true" comment="All filesets for APAR IY78253 are installed" test_ref="oval:org.mitre.oval:tst:7878"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5.3 meets CVE-2005-3396">
<extend_definition comment="IBM AIX 5.3 is installed" definition_ref="oval:org.mitre.oval:def:5325"/>
<criterion negate="true" comment="All filesets for APAR IY78241 are installed" test_ref="oval:org.mitre.oval:tst:8016"/>
</criteria>
</criteria>
</definition>
<definition id="oval:org.mitre.oval:def:5189" version="1" class="inventory">
<metadata>
<title>IBM AIX 5.2 is installed</title>
<affected family="unix">
<platform>IBM AIX 5.2</platform>
</affected>
<reference source="CPE" ref_id="cpe:/o:ibm:aix:5.2"/>
<description>The operating system installed on the system is IBM AIX 5.2.</description>
<oval_repository>
<dates>
<submitted date="2008-04-11T12:00:00.000-04:00">
<contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
</submitted>
<modified comment="Use pattern matching for 5.2 test" date="2008-06-12T11:18:00.144-04:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</modified>
<status_change date="2008-04-11T14:12:18.969-04:00">DRAFT</status_change>
<status_change date="2008-05-05T04:00:23.109-04:00">INTERIM</status_change>
<status_change date="2008-05-26T04:00:20.296-04:00">ACCEPTED</status_change>
</dates>
<status>ACCEPTED</status>
</oval_repository>
</metadata>
<criteria>
<criterion comment="IBM AIX version 5.2 is installed" test_ref="oval:com.hp.oval:tst:20080612015"/>
</criteria>
</definition>
<definition id="oval:org.mitre.oval:def:5169" version="1" class="vulnerability">
<metadata>
<title>IBM AIX "man" Untrusted Binaries Path Privilege Escalation Vulnerability</title>
<affected family="unix">
<platform>IBM AIX 5.3</platform>
<platform>IBM AIX 6.1</platform>
</affected>
<reference source="CVE" ref_id="CVE-2008-1274" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1274"/>
<description>Untrusted search path vulnerability in man in IBM AIX 6.1.0 allows local users to execute arbitrary code via a malicious program in the man directory.</description>
<oval_repository>
<dates>
<submitted date="2008-04-11T15:10:44.000-05:00">
<contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
</submitted>
<modified comment="Updated definition to include IBM AIX 6.1" date="2008-06-12T11:18:00.144-04:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</modified>
<status_change date="2008-04-11T14:12:20.600-04:00">DRAFT</status_change>
<status_change date="2008-04-28T04:00:07.806-04:00">INTERIM</status_change>
<status_change date="2008-05-19T04:00:09.619-04:00">ACCEPTED</status_change>
</dates>
<status>ACCEPTED</status>
</oval_repository>
</metadata>
<criteria operator="OR" comment="Software Section">
<criteria operator="AND" comment="IBM AIX 5.3 meets CVE-2008-1274">
<extend_definition comment="IBM AIX 5.3 is installed" definition_ref="oval:org.mitre.oval:def:5325"/>
<criteria operator="OR">
<criterion negate="true" comment="All filesets for APAR IZ17360 are installed" test_ref="oval:org.mitre.oval:tst:7916"/>
<criterion negate="true" comment="All filesets for APAR IZ17390 are installed" test_ref="oval:org.mitre.oval:tst:7946"/>
</criteria>
</criteria>
<criteria operator="AND" comment="IBM AIX 6.1 meets CVE-2008-1274">
<extend_definition comment="IBM AIX 6.1 is installed" definition_ref="oval:com.hp.oval:def:20080612006"/>
<criteria operator="OR">
<criterion negate="true" comment="All filesets for APAR IZ17177 are installed" test_ref="oval:com.hp.oval:tst:20080612016"/>
<criterion negate="true" comment="All filesets for APAR IZ17372 are installed" test_ref="oval:com.hp.oval:tst:20080612017"/>
</criteria>
</criteria>
</criteria>
</definition>
<definition id="oval:com.hp.oval:def:20080612007" version="0" class="vulnerability">
<metadata>
<title>IBM AIX Kernel Buffer Overflow Lets Local Users Gain Elevated Privileges or Deny Service</title>
<affected family="unix">
<platform>IBM AIX 5.3</platform>
<platform>IBM AIX 6.1</platform>
</affected>
<reference source="CVE" ref_id="CVE-2008-2513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2513"/>
<description>Buffer overflow in the kernel in IBM AIX 5.2, 5.3, and 6.1 allows local users to execute arbitrary code in kernel mode via unknown attack vectors.</description>
<oval_repository>
<dates>
<submitted date="2008-06-12T15:10:44.000-05:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</submitted>
<status_change date="2008-04-11T14:12:20.600-04:00">DRAFT</status_change>
<status_change date="2008-04-28T04:00:07.806-04:00">INTERIM</status_change>
<status_change date="2008-05-19T04:00:09.619-04:00">ACCEPTED</status_change>
</dates>
<status>ACCEPTED</status>
</oval_repository>
</metadata>
<criteria operator="OR" comment="Software Section">
<criteria operator="AND" comment="IBM AIX 5.3 meets CVE-2008-2513">
<extend_definition comment="IBM AIX 5.3 is installed" definition_ref="oval:org.mitre.oval:def:5325"/>
<criteria operator="OR">
<criterion negate="true" comment="All filesets for APAR IZ22369 are installed" test_ref="oval:com.hp.oval:tst:20080612018"/>
<criterion negate="true" comment="All filesets for APAR IZ22368 are installed" test_ref="oval:com.hp.oval:tst:20080612019"/>
</criteria>
</criteria>
<criteria operator="AND" comment="IBM AIX 6.1 meets CVE-2008-2513">
<extend_definition comment="IBM AIX 6.1 is installed" definition_ref="oval:com.hp.oval:def:20080612006"/>
<criterion negate="true" comment="All filesets for APAR IZ22370 are installed" test_ref="oval:com.hp.oval:tst:20080612020"/>
</criteria>
</criteria>
</definition>
<definition id="oval:com.hp.oval:def:20080612008" version="0" class="vulnerability">
<metadata>
<title>IBM AIX Buffer Overflow in errpt Command May Let Local Users Gain Elevated Privileges</title>
<affected family="unix">
<platform>IBM AIX 5.3</platform>
<platform>IBM AIX 6.1</platform>
</affected>
<reference source="CVE" ref_id="CVE-2008-2514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2514"/>
<description>Buffer overflow in errpt in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via unknown attack vectors.</description>
<oval_repository>
<dates>
<submitted date="2008-06-12T15:10:44.000-05:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</submitted>
<status_change date="2008-04-11T14:12:20.600-04:00">DRAFT</status_change>
<status_change date="2008-04-28T04:00:07.806-04:00">INTERIM</status_change>
<status_change date="2008-05-19T04:00:09.619-04:00">ACCEPTED</status_change>
</dates>
<status>ACCEPTED</status>
</oval_repository>
</metadata>
<criteria operator="OR" comment="Software Section">
<criteria operator="AND" comment="IBM AIX 5200-10 meets CVE-2008-2514">
<extend_definition comment="IBM AIX 5200-10 is installed" definition_ref="oval:com.hp.oval:def:20080612001"/>
<criterion negate="true" comment="All filesets for APAR IZ19905 are installed" test_ref="oval:com.hp.oval:tst:20080612021"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5300-08 meets CVE-2008-2514">
<extend_definition comment="IBM AIX 5300-08 is installed" definition_ref="oval:com.hp.oval:def:20080612004"/>
<criterion negate="true" comment="All filesets for APAR IZ21494 are installed" test_ref="oval:com.hp.oval:tst:20080612022"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5.3 meets CVE-2008-2514">
<extend_definition comment="IBM AIX 5.3 is installed" definition_ref="oval:org.mitre.oval:def:5325"/>
<criteria operator="OR">
<criterion negate="true" comment="All filesets for APAR IZ22346 are installed" test_ref="oval:com.hp.oval:tst:20080612023"/>
<criterion negate="true" comment="All filesets for APAR IZ22347 are installed" test_ref="oval:com.hp.oval:tst:20080612024"/>
</criteria>
</criteria>
<criteria operator="AND" comment="IBM AIX 6.1 meets CVE-2008-2514">
<extend_definition comment="IBM AIX 6.1 is installed" definition_ref="oval:com.hp.oval:def:20080612006"/>
<criterion negate="true" comment="All filesets for APAR IZ22348 are installed" test_ref="oval:com.hp.oval:tst:20080612025"/>
</criteria>
</criteria>
</definition>
<definition id="oval:com.hp.oval:def:20080612009" version="0" class="vulnerability">
<metadata>
<title>IBM AIX Input Validation Flaw in iostat Command Lets Local Users Gain Root Privileges</title>
<affected family="unix">
<platform>IBM AIX 5.3</platform>
<platform>IBM AIX 6.1</platform>
</affected>
<reference source="CVE" ref_id="CVE-2008-2515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2515"/>
<description>Unspecified vulnerability in iostat in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via unknown vectors related to an "environment variable handling error."</description>
<oval_repository>
<dates>
<submitted date="2008-06-12T15:10:44.000-05:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</submitted>
<status_change date="2008-04-11T14:12:20.600-04:00">DRAFT</status_change>
<status_change date="2008-04-28T04:00:07.806-04:00">INTERIM</status_change>
<status_change date="2008-05-19T04:00:09.619-04:00">ACCEPTED</status_change>
</dates>
<status>ACCEPTED</status>
</oval_repository>
</metadata>
<criteria operator="OR" comment="Software Section">
<criteria operator="AND" comment="IBM AIX 5200-10 meets CVE-2008-2515">
<extend_definition comment="IBM AIX 5200-10 is installed" definition_ref="oval:com.hp.oval:def:20080612001"/>
<criterion negate="true" comment="All filesets for APAR IZ20635 are installed" test_ref="oval:com.hp.oval:tst:20080612026"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5300-08 meets CVE-2008-2515">
<extend_definition comment="IBM AIX 5300-08 is installed" definition_ref="oval:com.hp.oval:def:20080612004"/>
<criterion negate="true" comment="All filesets for APAR IZ21506 are installed" test_ref="oval:com.hp.oval:tst:20080612027"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5.3 meets CVE-2008-2515">
<extend_definition comment="IBM AIX 5.3 is installed" definition_ref="oval:org.mitre.oval:def:5325"/>
<criteria operator="OR">
<criterion negate="true" comment="All filesets for APAR IZ22351 are installed" test_ref="oval:com.hp.oval:tst:20080612028"/>
<criterion negate="true" comment="All filesets for APAR IZ22350 are installed" test_ref="oval:com.hp.oval:tst:20080612029"/>
</criteria>
</criteria>
<criteria operator="AND" comment="IBM AIX 6.1 meets CVE-2008-2515">
<extend_definition comment="IBM AIX 6.1 is installed" definition_ref="oval:com.hp.oval:def:20080612006"/>
<criterion negate="true" comment="All filesets for APAR IZ22349 are installed" test_ref="oval:com.hp.oval:tst:20080612030"/>
</criteria>
</criteria>
</definition>
<definition id="oval:org.mitre.oval:def:5325" version="1" class="inventory">
<metadata>
<title>IBM AIX 5.3 is installed</title>
<affected family="unix">
<platform>IBM AIX 5.3</platform>
</affected>
<reference source="CPE" ref_id="cpe:/o:ibm:aix:5.3"/>
<description>The operating system installed on the system is IBM AIX 5.3.</description>
<oval_repository>
<dates>
<submitted date="2008-04-11T12:00:00.000-04:00">
<contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
</submitted>
<modified comment="Use pattern matching for 5.3 test" date="2008-06-12T11:18:00.144-04:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</modified>
<status_change date="2008-04-11T14:12:19.480-04:00">DRAFT</status_change>
<status_change date="2008-05-05T04:00:24.174-04:00">INTERIM</status_change>
<status_change date="2008-05-26T04:00:20.886-04:00">ACCEPTED</status_change>
</dates>
<status>ACCEPTED</status>
</oval_repository>
</metadata>
<criteria>
<criterion comment="IBM AIX version 5.3 is installed" test_ref="oval:com.hp.oval:tst:20080612031"/>
</criteria>
</definition>
<definition id="oval:org.mitre.oval:def:4943" version="1" class="vulnerability">
<metadata>
<title>AIX bellmail buffer overflow vulnerability</title>
<affected family="unix">
<platform>IBM AIX 5.2</platform>
<platform>IBM AIX 5.3</platform>
</affected>
<reference source="CVE" ref_id="CVE-2007-4623" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4623"/>
<description>Stack-based buffer overflow in the sendrmt function in bellmail in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via a long parameter to the m command.</description>
<oval_repository>
<dates>
<submitted date="2008-04-11T15:10:44.000-05:00">
<contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
</submitted>
<status_change date="2008-04-11T14:12:20.234-04:00">DRAFT</status_change>
<status_change date="2008-04-28T04:00:06.799-04:00">INTERIM</status_change>
<status_change date="2008-05-19T04:00:08.528-04:00">ACCEPTED</status_change>
</dates>
<status>ACCEPTED</status>
</oval_repository>
</metadata>
<criteria operator="OR" comment="Software Section">
<criteria operator="AND" comment="IBM AIX 5.2 meets CVE-2007-4623">
<criterion comment="The level of fileset bos.net.tcp.client is greater than or equal 5.2.0.0" test_ref="oval:org.mitre.oval:tst:7050"/>
<criterion comment="The level of fileset bos.net.tcp.client is less than or equal 5.2.0.108" test_ref="oval:org.mitre.oval:tst:7261"/>
</criteria>
<criteria operator="AND" comment="IBM AIX 5.3 meets CVE-2007-4623">
<criterion comment="The level of fileset bos.net.tcp.client is greater than or equal 5.3.0.0" test_ref="oval:org.mitre.oval:tst:7735"/>
<criterion comment="The level of fileset bos.net.tcp.client is less than or equal 5.3.0.64" test_ref="oval:org.mitre.oval:tst:7429"/>
</criteria>
</criteria>
</definition>
<definition id="oval:com.hp.oval:def:20080612001" version="0" class="inventory">
<metadata>
<title>IBM AIX 5200-10 is installed</title>
<affected family="unix">
<platform>IBM AIX 5.2</platform>
</affected>
<reference source="CPE" ref_id="cpe:/o:ibm:aix:5.2"/>
<description>The operating system installed on the system is IBM AIX version 5200-10.</description>
<oval_repository>
<dates>
<submitted date="2008-06-12T12:00:00.000-04:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</submitted>
<status_change date="2008-04-11T14:12:19.480-04:00">DRAFT</status_change>
<status_change date="2008-05-05T04:00:24.174-04:00">INTERIM</status_change>
<status_change date="2008-05-26T04:00:20.886-04:00">ACCEPTED</status_change>
</dates>
<status>ACCEPTED</status>
</oval_repository>
</metadata>
<criteria>
<criterion comment="Version of IBM AIX installed is 5200-10" test_ref="oval:com.hp.oval:tst:20080612001"/>
</criteria>
</definition>
<definition id="oval:com.hp.oval:def:20080612002" version="0" class="inventory">
<metadata>
<title>IBM AIX 5300-06 is installed</title>
<affected family="unix">
<platform>IBM AIX 5.3</platform>
</affected>
<reference source="CPE" ref_id="cpe:/o:ibm:aix:5.3"/>
<description>The operating system installed on the system is IBM AIX version 5300-06.</description>
<oval_repository>
<dates>
<submitted date="2008-06-12T12:00:00.000-04:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</submitted>
<status_change date="2008-04-11T14:12:19.480-04:00">DRAFT</status_change>
<status_change date="2008-05-05T04:00:24.174-04:00">INTERIM</status_change>
<status_change date="2008-05-26T04:00:20.886-04:00">ACCEPTED</status_change>
</dates>
<status>ACCEPTED</status>
</oval_repository>
</metadata>
<criteria>
<criterion comment="Version of IBM AIX installed is 5300-06" test_ref="oval:com.hp.oval:tst:20080612002"/>
</criteria>
</definition>
<definition id="oval:com.hp.oval:def:20080612003" version="0" class="inventory">
<metadata>
<title>IBM AIX 5300-07 is installed</title>
<affected family="unix">
<platform>IBM AIX 5.3</platform>
</affected>
<reference source="CPE" ref_id="cpe:/o:ibm:aix:5.3"/>
<description>The operating system installed on the system is IBM AIX version 5300-07.</description>
<oval_repository>
<dates>
<submitted date="2008-06-12T12:00:00.000-04:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</submitted>
<status_change date="2008-04-11T14:12:19.480-04:00">DRAFT</status_change>
<status_change date="2008-05-05T04:00:24.174-04:00">INTERIM</status_change>
<status_change date="2008-05-26T04:00:20.886-04:00">ACCEPTED</status_change>
</dates>
<status>ACCEPTED</status>
</oval_repository>
</metadata>
<criteria>
<criterion comment="Version of IBM AIX installed is 5300-07" test_ref="oval:com.hp.oval:tst:20080612003"/>
</criteria>
</definition>
<definition id="oval:com.hp.oval:def:20080612004" version="0" class="inventory">
<metadata>
<title>IBM AIX 5300-08 is installed</title>
<affected family="unix">
<platform>IBM AIX 5.3</platform>
</affected>
<reference source="CPE" ref_id="cpe:/o:ibm:aix:5.3"/>
<description>The operating system installed on the system is IBM AIX version 5300-08.</description>
<oval_repository>
<dates>
<submitted date="2008-06-12T12:00:00.000-04:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</submitted>
<status_change date="2008-04-11T14:12:19.480-04:00">DRAFT</status_change>
<status_change date="2008-05-05T04:00:24.174-04:00">INTERIM</status_change>
<status_change date="2008-05-26T04:00:20.886-04:00">ACCEPTED</status_change>
</dates>
<status>ACCEPTED</status>
</oval_repository>
</metadata>
<criteria>
<criterion comment="Version of IBM AIX installed is 5300-08" test_ref="oval:com.hp.oval:tst:20080612004"/>
</criteria>
</definition>
<definition id="oval:com.hp.oval:def:20080612005" version="0" class="inventory">
<metadata>
<title>IBM AIX 6100-00 is installed</title>
<affected family="unix">
<platform>IBM AIX 6.1</platform>
</affected>
<reference source="CPE" ref_id="cpe:/o:ibm:aix:6.1"/>
<description>The operating system installed on the system is IBM AIX version 6100-00.</description>
<oval_repository>
<dates>
<submitted date="2008-06-12T12:00:00.000-04:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</submitted>
<status_change date="2008-04-11T14:12:19.480-04:00">DRAFT</status_change>
<status_change date="2008-05-05T04:00:24.174-04:00">INTERIM</status_change>
<status_change date="2008-05-26T04:00:20.886-04:00">ACCEPTED</status_change>
</dates>
<status>ACCEPTED</status>
</oval_repository>
</metadata>
<criteria>
<criterion comment="Version of IBM AIX installed is 6100-00" test_ref="oval:com.hp.oval:tst:20080612005"/>
</criteria>
</definition>
<definition id="oval:com.hp.oval:def:20080612006" version="0" class="inventory">
<metadata>
<title>IBM AIX 6.1 is installed</title>
<affected family="unix">
<platform>IBM AIX 6.1</platform>
</affected>
<reference source="CPE" ref_id="cpe:/o:ibm:aix:6.1"/>
<description>The operating system installed on the system is IBM AIX 6.1.</description>
<oval_repository>
<dates>
<submitted date="2008-06-12T12:00:00.000-04:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</submitted>
<modified comment="Use pattern matching for 6.1 test" date="2008-06-12T11:18:00.144-04:00">
<contributor organization="Hewlett-Packard">Michael Wood</contributor>
</modified>
<status_change date="2008-04-11T14:12:19.480-04:00">DRAFT</status_change>
<status_change date="2008-05-05T04:00:24.174-04:00">INTERIM</status_change>
<status_change date="2008-05-26T04:00:20.886-04:00">ACCEPTED</status_change>
</dates>
<status>ACCEPTED</status>
</oval_repository>
</metadata>
<criteria>
<criterion comment="IBM AIX version 6.1 is installed" test_ref="oval:com.hp.oval:tst:20080612014"/>
</criteria>
</definition>
</definitions>
<tests>
<oslevel_test id="oval:com.hp.oval:tst:20080612001" version="0" comment="Version of IBM AIX installed is 5200-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5715"/>
<state state_ref="oval:com.hp.oval:ste:20080612001"/>
</oslevel_test>
<oslevel_test id="oval:com.hp.oval:tst:20080612002" version="0" comment="Version of IBM AIX installed is 5300-06" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5715"/>
<state state_ref="oval:com.hp.oval:ste:20080612002"/>
</oslevel_test>
<oslevel_test id="oval:com.hp.oval:tst:20080612003" version="0" comment="Version of IBM AIX installed is 5300-07" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5715"/>
<state state_ref="oval:com.hp.oval:ste:20080612003"/>
</oslevel_test>
<oslevel_test id="oval:com.hp.oval:tst:20080612004" version="0" comment="Version of IBM AIX installed is 5300-08" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5715"/>
<state state_ref="oval:com.hp.oval:ste:20080612004"/>
</oslevel_test>
<oslevel_test id="oval:com.hp.oval:tst:20080612005" version="0" comment="Version of IBM AIX installed is 6100-00" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5715"/>
<state state_ref="oval:com.hp.oval:ste:20080612005"/>
</oslevel_test>
<oslevel_test id="oval:com.hp.oval:tst:20080612014" version="0" comment="Version of IBM AIX installed is 6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5715"/>
<state state_ref="oval:com.hp.oval:ste:20080612014"/>
</oslevel_test>
<fix_test id="oval:org.mitre.oval:tst:7818" version="1" comment="All filesets for APAR IZ15100 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5632"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612006" version="0" comment="All filesets for APAR IZ14526 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612006"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612007" version="0" comment="All filesets for APAR IZ15277 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612007"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612008" version="0" comment="All filesets for APAR IZ06078 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612008"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612009" version="0" comment="All filesets for APAR IZ06199 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612009"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612010" version="0" comment="All filesets for APAR IZ14508 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612010"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612011" version="0" comment="All filesets for APAR IZ16975 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612011"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612012" version="0" comment="All filesets for APAR IZ10749 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612012"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612013" version="0" comment="All filesets for APAR IZ12794 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612013"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612016" version="0" comment="All filesets for APAR IZ17177 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612016"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612017" version="0" comment="All filesets for APAR IZ17372 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612017"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612018" version="0" comment="All filesets for APAR IZ22369 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612018"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612019" version="0" comment="All filesets for APAR IZ22368 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612019"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612020" version="0" comment="All filesets for APAR IZ22370 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612020"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612021" version="0" comment="All filesets for APAR IZ19905 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612021"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612022" version="0" comment="All filesets for APAR IZ21494 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612022"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612023" version="0" comment="All filesets for APAR IZ22346 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612023"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612024" version="0" comment="All filesets for APAR IZ22347 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612024"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612025" version="0" comment="All filesets for APAR IZ22348 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612025"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612026" version="0" comment="All filesets for APAR IZ20635 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612026"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612027" version="0" comment="All filesets for APAR IZ21506 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612027"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612028" version="0" comment="All filesets for APAR IZ22351 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612028"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612029" version="0" comment="All filesets for APAR IZ22350 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612029"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:com.hp.oval:tst:20080612030" version="0" comment="All filesets for APAR IZ22349 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:com.hp.oval:obj:20080612030"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:org.mitre.oval:tst:7798" version="1" comment="All filesets for APAR IZ15276 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5498"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:org.mitre.oval:tst:7496" version="1" comment="All filesets for APAR IZ15057 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5714"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:org.mitre.oval:tst:8052" version="1" comment="All filesets for APAR IZ15479 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5665"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:org.mitre.oval:tst:8041" version="1" comment="All filesets for APAR IZ15480 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5556"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:org.mitre.oval:tst:7959" version="1" comment="All filesets for APAR IZ17059 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5713"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:org.mitre.oval:tst:7553" version="1" comment="All filesets for APAR IZ16991 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5734"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:org.mitre.oval:tst:7479" version="1" comment="All filesets for APAR IZ17058 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5768"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:org.mitre.oval:tst:8006" version="1" comment="All filesets for APAR IZ05246 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5485"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:org.mitre.oval:tst:7879" version="1" comment="All filesets for APAR IZ04946 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5755"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:org.mitre.oval:tst:7657" version="1" comment="All filesets for APAR IZ04953 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5735"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:org.mitre.oval:tst:7896" version="1" comment="All filesets for APAR IZ06663 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5806"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:org.mitre.oval:tst:7599" version="1" comment="All filesets for APAR IZ06505 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5657"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:org.mitre.oval:tst:7136" version="1" comment="All filesets for APAR IZ06022 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:4933"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:org.mitre.oval:tst:7955" version="1" comment="All filesets for APAR IZ16992 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5550"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:org.mitre.oval:tst:7870" version="1" comment="All filesets for APAR IZ17111 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:4959"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:org.mitre.oval:tst:7628" version="1" comment="All filesets for APAR IZ11820 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5724"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<oslevel_test id="oval:com.hp.oval:tst:20080612015" version="0" comment="IBM AIX version installed is 5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5715"/>
<state state_ref="oval:com.hp.oval:ste:20080612015"/>
</oslevel_test>
<fix_test id="oval:org.mitre.oval:tst:8016" version="1" comment="All filesets for APAR IY78241 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5563"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:org.mitre.oval:tst:7878" version="1" comment="All filesets for APAR IY78253 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5691"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<oslevel_test id="oval:com.hp.oval:tst:20080612031" version="0" comment="IBM AIX version installed is 5.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5715"/>
<state state_ref="oval:com.hp.oval:ste:20080612031"/>
</oslevel_test>
<fix_test id="oval:org.mitre.oval:tst:7946" version="1" comment="All filesets for APAR IZ17390 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5400"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fix_test id="oval:org.mitre.oval:tst:7916" version="1" comment="All filesets for APAR IZ17360 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix">
<object object_ref="oval:org.mitre.oval:obj:5547"/>
<state state_ref="oval:org.mitre.oval:ste:3334"/>
</fix_test>
<fileset_test id="oval:org.mitre.oval:tst:7735" version="1" comment="The level of fileset bos.net.tcp.client is greater than or equal 5.3.0.0" check_existence="at_least_one_exists" check="at least one" xmlns="