PT-2007-4547 · Ibm · Ibm Tivoli Provisioning Manager For Os Deployment

Published 2007-07-18 · Updated 2024-02-02 · CVE-2007-3268

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM Tivoli Provisioning Manager for OS Deployment version 5.1 before Fix Pack 3

Description The issue allows remote attackers to cause a denial of service, resulting in a crash of the rembo.exe process and multiple service outage. This is achieved by sending a read request with an invalid blksize (blocksize) parameter, which triggers a divide-by-zero error.

Recommendations For IBM Tivoli Provisioning Manager for OS Deployment version 5.1 before Fix Pack 3, apply Fix Pack 3 to resolve the issue.

Fix

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

CVE-2007-3268

Affected Products

Ibm Tivoli Provisioning Manager For Os Deployment

References · 9

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=560 · Vendor Advisory
• http://www3.software.ibm.com/ibmdl/pub/software/tivoli_support/patches/patches_5.1.0/5.1.0-TIV-TPMOSD-FP0003/5.1.0-TIV-TPMOSD-FP0003.README.HTM · Patch
• http://secunia.com/advisories/26093 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg24016347 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35468 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-3268 · Security Note
• http://securitytracker.com/id?1018401 · Note
• http://securityfocus.com/bid/24942 · Note
• http://vupen.com/english/advisories/2007/2560 · Note