PT-2012-5612 · Ibm · Ibm Power 5

Brian Smith · Publicado 2012-12-20 · Atualizado 2017-08-29 · CVE-2012-4856

Positive Technologies (AI Summary)

CVSS v2.0

7.9

Alta

Vetor base

AV:A/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Power 5 versions 9100-### through 9400-### before SF240 418 382

Description The issue is related to the Service Processor in the IBM Power 5, which fails to ensure the execution of firewall code. This allows remote attackers to execute arbitrary code via unspecified vectors.

Recommendations For versions prior to SF240 418 382, update to SF240 418 382 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2012-4856

Produtos afetados

Ibm Power 5

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/79736 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-4856 · Nota de Segurança
• http://aix.software.ibm.com/aix/efixes/security/squadrons_advisory.asc · Aviso do Fabricante
• http://kb.cert.org/vuls/id/194604 · Nota