PT-2010-3700 · Ibm · Ibm Communications Server For Aix+1

Publicado 2010-05-27 · Atualizado 2017-08-17 · CVE-2010-2090

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM Communications Server for Windows version 6.1.3 IBM Communications Server for AIX (aka CSAIX or CS/AIX) versions prior to 6.3.1.2

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This can be achieved by sending APPC data containing a GDSID variable with a GDS length that is too small.

Recommendations For IBM Communications Server for Windows version 6.1.3, update to a version that includes the fix for this issue. For IBM Communications Server for AIX versions prior to 6.3.1.2, update to version 6.3.1.2 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-2090

Produtos afetados

Ibm Communications Server For Aix

Ibm Communications Server For Windows

Referências · 8

• http://www-01.ibm.com/support/docview.wss?uid=swg1JR36026 · Aviso do Fabricante
• http://vupen.com/english/advisories/2010/1244 · Aviso do Fabricante
• http://securityfocus.com/bid/40372 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ68810 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-2090 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58874 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg24013012 · Nota
• http://secunia.com/advisories/39909 · Aviso do Fabricante