PT-2013-2393 · Ibm · Ibm Tivoli Netcool System Service Monitors (Ssm)/Application Service Monitors

Publicado 2013-06-05 · Atualizado 2017-08-29 · CVE-2013-0508

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) versions 4.0.0 through 4.0.0 FP13 IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) version 4.0.1 through 4.0.1 FP0

Description The issue allows context-dependent attackers to execute arbitrary code or cause a denial of service via a long line in specific files, including hrfstable.idx, hrdevice.idx, hrstorage.idx, lotusmapfile in the SSM Config directory, or .manifest.hive in the main agent directory.

Recommendations For IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) versions 4.0.0 through 4.0.0 FP13, update to FP14 or later. For IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) version 4.0.1 through 4.0.1 FP0, update to FP1 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-0508

Produtos afetados

Ibm Tivoli Netcool System Service Monitors (Ssm)/Application Service Monitors

Referências · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21638459 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-0508 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/82333 · Nota