PT-2010-5560 · Ibm · Ibm Lotus Mobile Connect

Publicado 2010-12-22 · Atualizado 2011-01-11 · CVE-2010-4593

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM Lotus Mobile Connect versions prior to 6.1.4

Description The issue is related to the Connection Manager in IBM Lotus Mobile Connect, which does not properly maintain a certain reference count. This allows remote authenticated users to cause a denial of service, specifically IP address exhaustion, by making invalid attempts to establish sessions with the same VPN ID from multiple devices.

Recommendations For versions prior to 6.1.4, update to version 6.1.4 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2010-4593

Produtos afetados

Ibm Lotus Mobile Connect

Referências · 4

• http://secunia.com/advisories/42703 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-4593 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg27020327 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ75012 · Aviso do Fabricante