PT-2010-3282 · Ibm+1 · Ibm Websphere Datapower B2B Appliance Xb60+5

Publicado

2010-04-29

·

Atualizado

2018-10-10

·

CVE-2010-1612

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XML Accelerator XA35 versions prior to 3.8.0.0 IBM WebSphere DataPower Low Latency Appliance XM70 versions prior to 3.8.0.0 IBM WebSphere DataPower Integration Appliance XI50 versions prior to 3.8.0.0 IBM WebSphere DataPower B2B Appliance XB60 versions prior to 3.8.0.0 IBM WebSphere DataPower XML Security Gateway XS40 SOA Appliances versions prior to 3.8.0.0
Description The issue allows remote attackers to cause a denial of service, resulting in an interface outage, by sending malformed ICMP packets to the 0.0.0.0 destination IP address when a QLOGIC Ethernet interface is used.
Recommendations For IBM WebSphere DataPower XML Accelerator XA35 versions prior to 3.8.0.0, update to version 3.8.0.0 or later. For IBM WebSphere DataPower Low Latency Appliance XM70 versions prior to 3.8.0.0, update to version 3.8.0.0 or later. For IBM WebSphere DataPower Integration Appliance XI50 versions prior to 3.8.0.0, update to version 3.8.0.0 or later. For IBM WebSphere DataPower B2B Appliance XB60 versions prior to 3.8.0.0, update to version 3.8.0.0 or later. For IBM WebSphere DataPower XML Security Gateway XS40 SOA Appliances versions prior to 3.8.0.0, update to version 3.8.0.0 or later.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2010-1612

Produtos afetados

Ibm Websphere Datapower B2B Appliance Xb60
Ibm Websphere Datapower Integration Appliance Xi50
Ibm Websphere Datapower Low Latency Appliance Xm70
Ibm Websphere Datapower Xml Accelerator Xa35
Ibm Websphere Datapower Xml Security Gateway Xs40 Soa Appliances
Qlogic Ethernet Interface