PT-2009-3158 · Ibm · Ibm Txseries For Multiplatforms

Publicado 2009-02-25 · Atualizado 2017-08-08 · CVE-2009-0505

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM TXSeries for Multiplatforms version 6.2 GA

Description The issue is related to the CICS listener in IBM TXSeries for Multiplatforms, which may allow remote authenticated users to cause a denial of service or have other unspecified impacts. This occurs when the CICS listener waits for a forcepurge acknowledgement from the CICS Application Server after an eci response timeout, and the acknowledgement is slow or nonexistent.

Recommendations For IBM TXSeries for Multiplatforms version 6.2 GA, consider implementing measures to handle forcepurge acknowledgements more efficiently, such as setting timeouts or implementing retry mechanisms, to minimize the risk of denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2009-0505

Produtos afetados

Ibm Txseries For Multiplatforms

Referências · 6

• http://vupen.com/english/advisories/2009/0911 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ22391 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48885 · Nota
• http://securityfocus.com/bid/33883 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg24019725 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-0505 · Nota de Segurança