PT-2013-2417 · Ibm · Ibm Websphere Application Server+1

Publicado 2013-04-24 · Atualizado 2017-08-29 · CVE-2013-0541

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 before 6.1.0.47 IBM WebSphere Application Server versions 7.0 before 7.0.0.29 IBM WebSphere Application Server versions 8.0 before 8.0.0.6 IBM WebSphere Application Server versions 8.5 before 8.5.0.2

Description A buffer overflow issue exists when a local OS registry is used in conjunction with WebSphere Identity Manager, allowing local users to cause a denial of service via unspecified vectors.

Recommendations For IBM WebSphere Application Server version 6.1, update to version 6.1.0.47 or later. For IBM WebSphere Application Server version 7.0, update to version 7.0.0.29 or later. For IBM WebSphere Application Server version 8.0, update to version 8.0.0.6 or later. For IBM WebSphere Application Server version 8.5, update to version 8.5.0.2 or later.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-0541

Produtos afetados

Ibm Websphere Application Server

Websphere Identity Manager

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/82696 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-0541 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM74909 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?&uid=swg21632423 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0541 · Nota