PT-2012-3875 · Ibm · Ibm Websphere Mq

Publicado 2012-09-25 · Atualizado 2017-08-29 · CVE-2012-2199

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 7.0.1 through 7.0.1.8 IBM WebSphere MQ version 7.1 IBM WebSphere MQ version 7.5

Description The issue allows remote attackers to cause a denial of service, resulting in an invalid address alignment exception and daemon crash. This is achieved through vectors involving a multiplexed channel.

Recommendations For IBM WebSphere MQ versions 7.0.1 through 7.0.1.8, update to version 7.0.1.9 or later. For IBM WebSphere MQ version 7.1, consider disabling the multiplexed channel feature until a patch is available. For IBM WebSphere MQ version 7.5, restrict access to the server message channel agent to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2012-2199

Produtos afetados

Ibm Websphere Mq

Referências · 4

• http://www-01.ibm.com/support/docview.wss?uid=swg1IC82725 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=swg21610285 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/76434 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-2199 · Nota de Segurança